4 |
5 |
8 |
9 |
10 |
11 | <%= yield %>
12 |
13 |
14 |
--------------------------------------------------------------------------------
/.github/dependabot.yml:
--------------------------------------------------------------------------------
1 | version: 2
2 | updates:
3 | - package-ecosystem: bundler
4 | directory: "/"
5 | schedule:
6 | interval: weekly
7 | open-pull-requests-limit: 10
8 | - package-ecosystem: github-actions
9 | directory: "/"
10 | schedule:
11 | interval: weekly
12 | open-pull-requests-limit: 10
13 |
--------------------------------------------------------------------------------
/config/initializers/assets.rb:
--------------------------------------------------------------------------------
1 | # Be sure to restart your server when you modify this file.
2 |
3 | # Version of your assets, change this if you want to expire all your assets.
4 | Rails.application.config.assets.version = "1.0"
5 |
6 | # Add additional assets to the asset load path.
7 | # Rails.application.config.assets.paths << Emoji.images_path
8 |
--------------------------------------------------------------------------------
/app/controllers/application_controller.rb:
--------------------------------------------------------------------------------
1 | class ApplicationController < ActionController::Base
2 | # Only allow modern browsers supporting webp images, web push, badges, import maps, CSS nesting, and CSS :has.
3 | allow_browser versions: :modern
4 |
5 | # Changes to the importmap will invalidate the etag for HTML responses
6 | stale_when_importmap_changes
7 | end
8 |
--------------------------------------------------------------------------------
/.gitattributes:
--------------------------------------------------------------------------------
1 | # See https://git-scm.com/docs/gitattributes for more about git attribute files.
2 |
3 | # Mark the database schema as having been generated.
4 | db/schema.rb linguist-generated
5 |
6 | # Mark any vendored files as having been vendored.
7 | vendor/* linguist-vendored
8 | config/credentials/*.yml.enc diff=rails_credentials
9 | config/credentials.yml.enc diff=rails_credentials
10 |
--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
1 | # README
2 |
3 | This README would normally document whatever steps are necessary to get the
4 | application up and running.
5 |
6 | Things you may want to cover:
7 |
8 | * Ruby version
9 |
10 | * System dependencies
11 |
12 | * Configuration
13 |
14 | * Database creation
15 |
16 | * Database initialization
17 |
18 | * How to run the test suite
19 |
20 | * Services (job queues, cache servers, search engines, etc.)
21 |
22 | * Deployment instructions
23 |
24 | * ...
25 |
--------------------------------------------------------------------------------
/test/test_helper.rb:
--------------------------------------------------------------------------------
1 | ENV["RAILS_ENV"] ||= "test"
2 | require_relative "../config/environment"
3 | require "rails/test_help"
4 |
5 | module ActiveSupport
6 | class TestCase
7 | # Run tests in parallel with specified workers
8 | parallelize(workers: :number_of_processors)
9 |
10 | # Setup all fixtures in test/fixtures/*.yml for all tests in alphabetical order.
11 | fixtures :all
12 |
13 | # Add more helper methods to be used by all tests here...
14 | end
15 | end
16 |
--------------------------------------------------------------------------------
/app/views/pwa/manifest.json.erb:
--------------------------------------------------------------------------------
1 | {
2 | "name": "Railsdiff",
3 | "icons": [
4 | {
5 | "src": "/icon.png",
6 | "type": "image/png",
7 | "sizes": "512x512"
8 | },
9 | {
10 | "src": "/icon.png",
11 | "type": "image/png",
12 | "sizes": "512x512",
13 | "purpose": "maskable"
14 | }
15 | ],
16 | "start_url": "/",
17 | "display": "standalone",
18 | "scope": "/",
19 | "description": "Railsdiff.",
20 | "theme_color": "red",
21 | "background_color": "red"
22 | }
23 |
--------------------------------------------------------------------------------
/config/initializers/filter_parameter_logging.rb:
--------------------------------------------------------------------------------
1 | # Be sure to restart your server when you modify this file.
2 |
3 | # Configure parameters to be partially matched (e.g. passw matches password) and filtered from the log file.
4 | # Use this to limit dissemination of sensitive information.
5 | # See the ActiveSupport::ParameterFilter documentation for supported notations and behaviors.
6 | Rails.application.config.filter_parameters += [
7 | :passw, :email, :secret, :token, :_key, :crypt, :salt, :certificate, :otp, :ssn, :cvv, :cvc
8 | ]
9 |
--------------------------------------------------------------------------------
/db/seeds.rb:
--------------------------------------------------------------------------------
1 | # This file should ensure the existence of records required to run the application in every environment (production,
2 | # development, test). The code here should be idempotent so that it can be executed at any point in every environment.
3 | # The data can then be loaded with the bin/rails db:seed command (or created alongside the database with db:setup).
4 | #
5 | # Example:
6 | #
7 | # ["Action", "Comedy", "Drama", "Horror"].each do |genre_name|
8 | # MovieGenre.find_or_create_by!(name: genre_name)
9 | # end
10 |
--------------------------------------------------------------------------------
/app/assets/stylesheets/application.css:
--------------------------------------------------------------------------------
1 | /*
2 | * This is a manifest file that'll be compiled into application.css.
3 | *
4 | * With Propshaft, assets are served efficiently without preprocessing steps. You can still include
5 | * application-wide styles in this file, but keep in mind that CSS precedence will follow the standard
6 | * cascading order, meaning styles declared later in the document or manifest will override earlier ones,
7 | * depending on specificity.
8 | *
9 | * Consider organizing styles into separate files for maintainability.
10 | */
11 |
--------------------------------------------------------------------------------
/config/initializers/inflections.rb:
--------------------------------------------------------------------------------
1 | # Be sure to restart your server when you modify this file.
2 |
3 | # Add new inflection rules using the following format. Inflections
4 | # are locale specific, and you may define rules for as many different
5 | # locales as you wish. All of these examples are active by default:
6 | # ActiveSupport::Inflector.inflections(:en) do |inflect|
7 | # inflect.plural /^(ox)$/i, "\\1en"
8 | # inflect.singular /^(ox)en/i, "\\1"
9 | # inflect.irregular "person", "people"
10 | # inflect.uncountable %w( fish sheep )
11 | # end
12 |
13 | # These inflection rules are supported but not enabled by default:
14 | # ActiveSupport::Inflector.inflections(:en) do |inflect|
15 | # inflect.acronym "RESTful"
16 | # end
17 |
--------------------------------------------------------------------------------
/config/routes.rb:
--------------------------------------------------------------------------------
1 | Rails.application.routes.draw do
2 | # Define your application routes per the DSL in https://guides.rubyonrails.org/routing.html
3 |
4 | # Reveal health status on /up that returns 200 if the app boots with no exceptions, otherwise 500.
5 | # Can be used by load balancers and uptime monitors to verify that the app is live.
6 | get "up" => "rails/health#show", as: :rails_health_check
7 |
8 | # Render dynamic PWA files from app/views/pwa/* (remember to link manifest in application.html.erb)
9 | # get "manifest" => "rails/pwa#manifest", as: :pwa_manifest
10 | # get "service-worker" => "rails/pwa#service_worker", as: :pwa_service_worker
11 |
12 | # Defines the root path route ("/")
13 | # root "posts#index"
14 | end
15 |
--------------------------------------------------------------------------------
/.gitignore:
--------------------------------------------------------------------------------
1 | # See https://help.github.com/articles/ignoring-files for more about ignoring files.
2 | #
3 | # Temporary files generated by your text editor or operating system
4 | # belong in git's global ignore instead:
5 | # `$XDG_CONFIG_HOME/git/ignore` or `~/.config/git/ignore`
6 |
7 | # Ignore bundler config.
8 | /.bundle
9 |
10 | # Ignore all environment files.
11 | /.env*
12 |
13 | # Ignore all logfiles and tempfiles.
14 | /log/*
15 | /tmp/*
16 | !/log/.keep
17 | !/tmp/.keep
18 |
19 | # Ignore pidfiles, but keep the directory.
20 | /tmp/pids/*
21 | !/tmp/pids/
22 | !/tmp/pids/.keep
23 |
24 | # Ignore storage (uploaded files in development and any SQLite databases).
25 | /storage/*
26 | !/storage/.keep
27 | /tmp/storage/*
28 | !/tmp/storage/
29 | !/tmp/storage/.keep
30 |
31 | /public/assets
32 |
33 | # Ignore key files for decrypting credentials and more.
34 | /config/*.key
35 |
36 |
--------------------------------------------------------------------------------
/config/storage.yml:
--------------------------------------------------------------------------------
1 | test:
2 | service: Disk
3 | root: <%= Rails.root.join("tmp/storage") %>
4 |
5 | local:
6 | service: Disk
7 | root: <%= Rails.root.join("storage") %>
8 |
9 | # Use bin/rails credentials:edit to set the AWS secrets (as aws:access_key_id|secret_access_key)
10 | # amazon:
11 | # service: S3
12 | # access_key_id: <%= Rails.application.credentials.dig(:aws, :access_key_id) %>
13 | # secret_access_key: <%= Rails.application.credentials.dig(:aws, :secret_access_key) %>
14 | # region: us-east-1
15 | # bucket: your_own_bucket-<%= Rails.env %>
16 |
17 | # Remember not to checkin your GCS keyfile to a repository
18 | # google:
19 | # service: GCS
20 | # project: your_project
21 | # credentials: <%= Rails.root.join("path/to/gcs.keyfile") %>
22 | # bucket: your_own_bucket-<%= Rails.env %>
23 |
24 | # mirror:
25 | # service: Mirror
26 | # primary: local
27 | # mirrors: [ amazon, google, microsoft ]
28 |
--------------------------------------------------------------------------------
/config/ci.rb:
--------------------------------------------------------------------------------
1 | # Run using bin/ci
2 |
3 | CI.run do
4 | step "Setup", "bin/setup --skip-server"
5 |
6 | step "Style: Ruby", "bin/rubocop"
7 |
8 | step "Security: Gem audit", "bin/bundler-audit"
9 | step "Security: Importmap vulnerability audit", "bin/importmap audit"
10 | step "Security: Brakeman code analysis", "bin/brakeman --quiet --no-pager --exit-on-warn --exit-on-error"
11 |
12 | step "Tests: Rails", "bin/rails test"
13 | step "Tests: System", "bin/rails test:system"
14 | step "Tests: Seeds", "env RAILS_ENV=test bin/rails db:seed:replant"
15 |
16 | # Optional: set a green GitHub commit status to unblock PR merge.
17 | # Requires the `gh` CLI and `gh extension install basecamp/gh-signoff`.
18 | # if success?
19 | # step "Signoff: All systems go. Ready for merge and deploy.", "gh signoff"
20 | # else
21 | # failure "Signoff: CI failed. Do not merge or deploy.", "Fix the issues and try again."
22 | # end
23 | end
24 |
--------------------------------------------------------------------------------
/app/views/pwa/service-worker.js:
--------------------------------------------------------------------------------
1 | // Add a service worker for processing Web Push notifications:
2 | //
3 | // self.addEventListener("push", async (event) => {
4 | // const { title, options } = await event.data.json()
5 | // event.waitUntil(self.registration.showNotification(title, options))
6 | // })
7 | //
8 | // self.addEventListener("notificationclick", function(event) {
9 | // event.notification.close()
10 | // event.waitUntil(
11 | // clients.matchAll({ type: "window" }).then((clientList) => {
12 | // for (let i = 0; i < clientList.length; i++) {
13 | // let client = clientList[i]
14 | // let clientPath = (new URL(client.url)).pathname
15 | //
16 | // if (clientPath == event.notification.data.path && "focus" in client) {
17 | // return client.focus()
18 | // }
19 | // }
20 | //
21 | // if (clients.openWindow) {
22 | // return clients.openWindow(event.notification.data.path)
23 | // }
24 | // })
25 | // )
26 | // })
27 |
--------------------------------------------------------------------------------
/config/locales/en.yml:
--------------------------------------------------------------------------------
1 | # Files in the config/locales directory are used for internationalization and
2 | # are automatically loaded by Rails. If you want to use locales other than
3 | # English, add the necessary files in this directory.
4 | #
5 | # To use the locales, use `I18n.t`:
6 | #
7 | # I18n.t "hello"
8 | #
9 | # In views, this is aliased to just `t`:
10 | #
11 | # <%= t("hello") %>
12 | #
13 | # To use a different locale, set it with `I18n.locale`:
14 | #
15 | # I18n.locale = :es
16 | #
17 | # This would use the information in config/locales/es.yml.
18 | #
19 | # To learn more about the API, please read the Rails Internationalization guide
20 | # at https://guides.rubyonrails.org/i18n.html.
21 | #
22 | # Be aware that YAML interprets the following case-insensitive strings as
23 | # booleans: `true`, `false`, `on`, `off`, `yes`, `no`. Therefore, these strings
24 | # must be quoted to be interpreted as strings. For example:
25 | #
26 | # en:
27 | # "yes": yup
28 | # enabled: "ON"
29 |
30 | en:
31 | hello: "Hello world"
32 |
--------------------------------------------------------------------------------
/app/views/layouts/application.html.erb:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 | <%= content_for(:title) || "Railsdiff" %>
5 |
6 |
7 |
8 |
9 | <%= csrf_meta_tags %>
10 | <%= csp_meta_tag %>
11 |
12 | <%= yield :head %>
13 |
14 | <%# Enable PWA manifest for installable apps (make sure to enable in config/routes.rb too!) %>
15 | <%#= tag.link rel: "manifest", href: pwa_manifest_path(format: :json) %>
16 |
17 |
18 |
19 |
20 |
21 | <%# Includes all stylesheet files in app/assets/stylesheets %>
22 | <%= stylesheet_link_tag :app, "data-turbo-track": "reload" %>
23 |
24 |
25 |
26 | <%= yield %>
27 |
28 |
29 |
--------------------------------------------------------------------------------
/.dockerignore:
--------------------------------------------------------------------------------
1 | # See https://docs.docker.com/engine/reference/builder/#dockerignore-file for more about ignoring files.
2 |
3 | # Ignore git directory.
4 | /.git/
5 | /.gitignore
6 |
7 | # Ignore bundler config.
8 | /.bundle
9 |
10 | # Ignore all environment files.
11 | /.env*
12 |
13 | # Ignore all default key files.
14 | /config/master.key
15 | /config/credentials/*.key
16 |
17 | # Ignore all logfiles and tempfiles.
18 | /log/*
19 | /tmp/*
20 | !/log/.keep
21 | !/tmp/.keep
22 |
23 | # Ignore pidfiles, but keep the directory.
24 | /tmp/pids/*
25 | !/tmp/pids/.keep
26 |
27 | # Ignore storage (uploaded files in development and any SQLite databases).
28 | /storage/*
29 | !/storage/.keep
30 | /tmp/storage/*
31 | !/tmp/storage/.keep
32 |
33 | # Ignore assets.
34 | /node_modules/
35 | /app/assets/builds/*
36 | !/app/assets/builds/.keep
37 | /public/assets
38 |
39 | # Ignore CI service files.
40 | /.github
41 |
42 | # Ignore Kamal files.
43 | /config/deploy*.yml
44 | /.kamal
45 |
46 | # Ignore development files
47 | /.devcontainer
48 |
49 | # Ignore Docker-related files
50 | /.dockerignore
51 | /Dockerfile*
52 |
--------------------------------------------------------------------------------
/config/application.rb:
--------------------------------------------------------------------------------
1 | require_relative "boot"
2 |
3 | require "rails/all"
4 |
5 | # Require the gems listed in Gemfile, including any gems
6 | # you've limited to :test, :development, or :production.
7 | Bundler.require(*Rails.groups)
8 |
9 | module Railsdiff
10 | class Application < Rails::Application
11 | # Initialize configuration defaults for originally generated Rails version.
12 | config.load_defaults 8.1
13 |
14 | # Please, add to the `ignore` list any other `lib` subdirectories that do
15 | # not contain `.rb` files, or that should not be reloaded or eager loaded.
16 | # Common ones are `templates`, `generators`, or `middleware`, for example.
17 | config.autoload_lib(ignore: %w[assets tasks])
18 |
19 | # Configuration for the application, engines, and railties goes here.
20 | #
21 | # These settings can be overridden in specific environments using the files
22 | # in config/environments, which are processed later.
23 | #
24 | # config.time_zone = "Central Time (US & Canada)"
25 | # config.eager_load_paths << Rails.root.join("extras")
26 | end
27 | end
28 |
--------------------------------------------------------------------------------
/bin/setup:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env ruby
2 | require "fileutils"
3 |
4 | APP_ROOT = File.expand_path("..", __dir__)
5 |
6 | def system!(*args)
7 | system(*args, exception: true)
8 | end
9 |
10 | FileUtils.chdir APP_ROOT do
11 | # This script is a way to set up or update your development environment automatically.
12 | # This script is idempotent, so that you can run it at any time and get an expectable outcome.
13 | # Add necessary setup steps to this file.
14 |
15 | puts "== Installing dependencies =="
16 | system("bundle check") || system!("bundle install")
17 |
18 | # puts "\n== Copying sample files =="
19 | # unless File.exist?("config/database.yml")
20 | # FileUtils.cp "config/database.yml.sample", "config/database.yml"
21 | # end
22 |
23 | puts "\n== Preparing database =="
24 | system! "bin/rails db:prepare"
25 | system! "bin/rails db:reset" if ARGV.include?("--reset")
26 |
27 | puts "\n== Removing old logs and tempfiles =="
28 | system! "bin/rails log:clear tmp:clear"
29 |
30 | unless ARGV.include?("--skip-server")
31 | puts "\n== Starting development server =="
32 | STDOUT.flush # flush the output before exec(2) so that it displays
33 | exec "bin/dev"
34 | end
35 | end
36 |
--------------------------------------------------------------------------------
/config/database.yml:
--------------------------------------------------------------------------------
1 | # SQLite. Versions 3.8.0 and up are supported.
2 | # gem install sqlite3
3 | #
4 | # Ensure the SQLite 3 gem is defined in your Gemfile
5 | # gem "sqlite3"
6 | #
7 | default: &default
8 | adapter: sqlite3
9 | max_connections: <%= ENV.fetch("RAILS_MAX_THREADS") { 5 } %>
10 | timeout: 5000
11 |
12 | development:
13 | <<: *default
14 | database: storage/development.sqlite3
15 |
16 | # Warning: The database defined as "test" will be erased and
17 | # re-generated from your development database when you run "rake".
18 | # Do not set this db to the same as development or production.
19 | test:
20 | <<: *default
21 | database: storage/test.sqlite3
22 |
23 |
24 | # Store production database in the storage/ directory, which by default
25 | # is mounted as a persistent Docker volume in config/deploy.yml.
26 | production:
27 | primary:
28 | <<: *default
29 | database: storage/production.sqlite3
30 | cache:
31 | <<: *default
32 | database: storage/production_cache.sqlite3
33 | migrations_paths: db/cache_migrate
34 | queue:
35 | <<: *default
36 | database: storage/production_queue.sqlite3
37 | migrations_paths: db/queue_migrate
38 | cable:
39 | <<: *default
40 | database: storage/production_cable.sqlite3
41 | migrations_paths: db/cable_migrate
42 |
--------------------------------------------------------------------------------
/config/initializers/content_security_policy.rb:
--------------------------------------------------------------------------------
1 | # Be sure to restart your server when you modify this file.
2 |
3 | # Define an application-wide content security policy.
4 | # See the Securing Rails Applications Guide for more information:
5 | # https://guides.rubyonrails.org/security.html#content-security-policy-header
6 |
7 | # Rails.application.configure do
8 | # config.content_security_policy do |policy|
9 | # policy.default_src :self, :https
10 | # policy.font_src :self, :https, :data
11 | # policy.img_src :self, :https, :data
12 | # policy.object_src :none
13 | # policy.script_src :self, :https
14 | # policy.style_src :self, :https
15 | # # Specify URI for violation reports
16 | # # policy.report_uri "/csp-violation-report-endpoint"
17 | # end
18 | #
19 | # # Generate session nonces for permitted importmap, inline scripts, and inline styles.
20 | # config.content_security_policy_nonce_generator = ->(request) { request.session.id.to_s }
21 | # config.content_security_policy_nonce_directives = %w(script-src style-src)
22 | #
23 | # # Automatically add `nonce` to `javascript_tag`, `javascript_include_tag`, and `stylesheet_link_tag`
24 | # # if the corresponding directives are specified in `content_security_policy_nonce_directives`.
25 | # # config.content_security_policy_nonce_auto = true
26 | #
27 | # # Report violations without enforcing the policy.
28 | # # config.content_security_policy_report_only = true
29 | # end
30 |
--------------------------------------------------------------------------------
/config/puma.rb:
--------------------------------------------------------------------------------
1 | # This configuration file will be evaluated by Puma. The top-level methods that
2 | # are invoked here are part of Puma's configuration DSL. For more information
3 | # about methods provided by the DSL, see https://puma.io/puma/Puma/DSL.html.
4 | #
5 | # Puma starts a configurable number of processes (workers) and each process
6 | # serves each request in a thread from an internal thread pool.
7 | #
8 | # You can control the number of workers using ENV["WEB_CONCURRENCY"]. You
9 | # should only set this value when you want to run 2 or more workers. The
10 | # default is already 1. You can set it to `auto` to automatically start a worker
11 | # for each available processor.
12 | #
13 | # The ideal number of threads per worker depends both on how much time the
14 | # application spends waiting for IO operations and on how much you wish to
15 | # prioritize throughput over latency.
16 | #
17 | # As a rule of thumb, increasing the number of threads will increase how much
18 | # traffic a given process can handle (throughput), but due to CRuby's
19 | # Global VM Lock (GVL) it has diminishing returns and will degrade the
20 | # response time (latency) of the application.
21 | #
22 | # The default is set to 3 threads as it's deemed a decent compromise between
23 | # throughput and latency for the average Rails application.
24 | #
25 | # Any libraries that use a connection pool or another resource pool should
26 | # be configured to provide at least as many connections as the number of
27 | # threads. This includes Active Record's `pool` parameter in `database.yml`.
28 | threads_count = ENV.fetch("RAILS_MAX_THREADS", 3)
29 | threads threads_count, threads_count
30 |
31 | # Specifies the `port` that Puma will listen on to receive requests; default is 3000.
32 | port ENV.fetch("PORT", 3000)
33 |
34 | # Allow puma to be restarted by `bin/rails restart` command.
35 | plugin :tmp_restart
36 |
37 | # Run the Solid Queue supervisor inside of Puma for single-server deployments.
38 | plugin :solid_queue if ENV["SOLID_QUEUE_IN_PUMA"]
39 |
40 | # Specify the PID file. Defaults to tmp/pids/server.pid in development.
41 | # In other environments, only set the PID file if requested.
42 | pidfile ENV["PIDFILE"] if ENV["PIDFILE"]
43 |
--------------------------------------------------------------------------------
/config/environments/test.rb:
--------------------------------------------------------------------------------
1 | # The test environment is used exclusively to run your application's
2 | # test suite. You never need to work with it otherwise. Remember that
3 | # your test database is "scratch space" for the test suite and is wiped
4 | # and recreated between test runs. Don't rely on the data there!
5 |
6 | Rails.application.configure do
7 | # Settings specified here will take precedence over those in config/application.rb.
8 |
9 | # While tests run files are not watched, reloading is not necessary.
10 | config.enable_reloading = false
11 |
12 | # Eager loading loads your entire application. When running a single test locally,
13 | # this is usually not necessary, and can slow down your test suite. However, it's
14 | # recommended that you enable it in continuous integration systems to ensure eager
15 | # loading is working properly before deploying your code.
16 | config.eager_load = ENV["CI"].present?
17 |
18 | # Configure public file server for tests with cache-control for performance.
19 | config.public_file_server.headers = { "cache-control" => "public, max-age=3600" }
20 |
21 | # Show full error reports.
22 | config.consider_all_requests_local = true
23 | config.cache_store = :null_store
24 |
25 | # Render exception templates for rescuable exceptions and raise for other exceptions.
26 | config.action_dispatch.show_exceptions = :rescuable
27 |
28 | # Disable request forgery protection in test environment.
29 | config.action_controller.allow_forgery_protection = false
30 |
31 | # Store uploaded files on the local file system in a temporary directory.
32 | config.active_storage.service = :test
33 |
34 | # Tell Action Mailer not to deliver emails to the real world.
35 | # The :test delivery method accumulates sent emails in the
36 | # ActionMailer::Base.deliveries array.
37 | config.action_mailer.delivery_method = :test
38 |
39 | # Set host to be used by links generated in mailer templates.
40 | config.action_mailer.default_url_options = { host: "example.com" }
41 |
42 | # Print deprecation notices to the stderr.
43 | config.active_support.deprecation = :stderr
44 |
45 | # Raises error for missing translations.
46 | # config.i18n.raise_on_missing_translations = true
47 |
48 | # Annotate rendered view with file names.
49 | # config.action_view.annotate_rendered_view_with_filenames = true
50 |
51 | # Raise error when a before_action's only/except options reference missing actions.
52 | config.action_controller.raise_on_missing_callback_actions = true
53 | end
54 |
--------------------------------------------------------------------------------
/Gemfile:
--------------------------------------------------------------------------------
1 | source "https://rubygems.org"
2 |
3 | # Bundle edge Rails instead: gem "rails", github: "rails/rails", branch: "main"
4 | gem "rails", "~> 8.1.1"
5 | # The modern asset pipeline for Rails [https://github.com/rails/propshaft]
6 | gem "propshaft"
7 | # Use sqlite3 as the database for Active Record
8 | gem "sqlite3", ">= 2.1"
9 | # Use the Puma web server [https://github.com/puma/puma]
10 | gem "puma", ">= 5.0"
11 | # Use JavaScript with ESM import maps [https://github.com/rails/importmap-rails]
12 | gem "importmap-rails"
13 | # Hotwire's SPA-like page accelerator [https://turbo.hotwired.dev]
14 | gem "turbo-rails"
15 | # Hotwire's modest JavaScript framework [https://stimulus.hotwired.dev]
16 | gem "stimulus-rails"
17 | # Build JSON APIs with ease [https://github.com/rails/jbuilder]
18 | gem "jbuilder"
19 |
20 | # Use Active Model has_secure_password [https://guides.rubyonrails.org/active_model_basics.html#securepassword]
21 | # gem "bcrypt", "~> 3.1.7"
22 |
23 | # Windows does not include zoneinfo files, so bundle the tzinfo-data gem
24 | gem "tzinfo-data", platforms: %i[ windows jruby ]
25 |
26 | # Use the database-backed adapters for Rails.cache, Active Job, and Action Cable
27 | gem "solid_cache"
28 | gem "solid_queue"
29 | gem "solid_cable"
30 |
31 | # Reduces boot times through caching; required in config/boot.rb
32 | gem "bootsnap", require: false
33 |
34 | # Deploy this application anywhere as a Docker container [https://kamal-deploy.org]
35 | gem "kamal", require: false
36 |
37 | # Add HTTP asset caching/compression and X-Sendfile acceleration to Puma [https://github.com/basecamp/thruster/]
38 | gem "thruster", require: false
39 |
40 | # Use Active Storage variants [https://guides.rubyonrails.org/active_storage_overview.html#transforming-images]
41 | gem "image_processing", "~> 1.2"
42 |
43 | group :development, :test do
44 | # See https://guides.rubyonrails.org/debugging_rails_applications.html#debugging-with-the-debug-gem
45 | gem "debug", platforms: %i[ mri windows ], require: "debug/prelude"
46 |
47 | # Audits gems for known security defects (use config/bundler-audit.yml to ignore issues)
48 | gem "bundler-audit", require: false
49 |
50 | # Static analysis for security vulnerabilities [https://brakemanscanner.org/]
51 | gem "brakeman", require: false
52 |
53 | # Omakase Ruby styling [https://github.com/rails/rubocop-rails-omakase/]
54 | gem "rubocop-rails-omakase", require: false
55 | end
56 |
57 | group :development do
58 | # Use console on exceptions pages [https://github.com/rails/web-console]
59 | gem "web-console"
60 | end
61 |
62 | group :test do
63 | # Use system testing [https://guides.rubyonrails.org/testing.html#system-testing]
64 | gem "capybara"
65 | gem "selenium-webdriver"
66 | end
67 |
--------------------------------------------------------------------------------
/Dockerfile:
--------------------------------------------------------------------------------
1 | # syntax=docker/dockerfile:1
2 | # check=error=true
3 |
4 | # This Dockerfile is designed for production, not development. Use with Kamal or build'n'run by hand:
5 | # docker build -t railsdiff .
6 | # docker run -d -p 80:80 -e RAILS_MASTER_KEY= --name railsdiff railsdiff
7 |
8 | # For a containerized dev environment, see Dev Containers: https://guides.rubyonrails.org/getting_started_with_devcontainer.html
9 |
10 | # Make sure RUBY_VERSION matches the Ruby version in .ruby-version
11 | ARG RUBY_VERSION=your-ruby-version
12 | FROM docker.io/library/ruby:$RUBY_VERSION-slim AS base
13 |
14 | # Rails app lives here
15 | WORKDIR /rails
16 |
17 | # Install base packages
18 | RUN apt-get update -qq && \
19 | apt-get install --no-install-recommends -y curl libjemalloc2 libvips sqlite3 && \
20 | ln -s /usr/lib/$(uname -m)-linux-gnu/libjemalloc.so.2 /usr/local/lib/libjemalloc.so && \
21 | rm -rf /var/lib/apt/lists /var/cache/apt/archives
22 |
23 | # Set production environment variables and enable jemalloc for reduced memory usage and latency.
24 | ENV RAILS_ENV="production" \
25 | BUNDLE_DEPLOYMENT="1" \
26 | BUNDLE_PATH="/usr/local/bundle" \
27 | BUNDLE_WITHOUT="development" \
28 | LD_PRELOAD="/usr/local/lib/libjemalloc.so"
29 |
30 | # Throw-away build stage to reduce size of final image
31 | FROM base AS build
32 |
33 | # Install packages needed to build gems
34 | RUN apt-get update -qq && \
35 | apt-get install --no-install-recommends -y build-essential git libyaml-dev pkg-config && \
36 | rm -rf /var/lib/apt/lists /var/cache/apt/archives
37 |
38 | # Install application gems
39 | COPY Gemfile Gemfile.lock vendor ./
40 |
41 | RUN bundle install && \
42 | rm -rf ~/.bundle/ "${BUNDLE_PATH}"/ruby/*/cache "${BUNDLE_PATH}"/ruby/*/bundler/gems/*/.git && \
43 | # -j 1 disable parallel compilation to avoid a QEMU bug: https://github.com/rails/bootsnap/issues/495
44 | bundle exec bootsnap precompile -j 1 --gemfile
45 |
46 | # Copy application code
47 | COPY . .
48 |
49 | # Precompile bootsnap code for faster boot times.
50 | # -j 1 disable parallel compilation to avoid a QEMU bug: https://github.com/rails/bootsnap/issues/495
51 | RUN bundle exec bootsnap precompile -j 1 app/ lib/
52 |
53 | # Precompiling assets for production without requiring secret RAILS_MASTER_KEY
54 | RUN SECRET_KEY_BASE_DUMMY=1 ./bin/rails assets:precompile
55 |
56 |
57 |
58 |
59 | # Final stage for app image
60 | FROM base
61 |
62 | # Run and own only the runtime files as a non-root user for security
63 | RUN groupadd --system --gid 1000 rails && \
64 | useradd rails --uid 1000 --gid 1000 --create-home --shell /bin/bash
65 | USER 1000:1000
66 |
67 | # Copy built artifacts: gems, application
68 | COPY --chown=rails:rails --from=build "${BUNDLE_PATH}" "${BUNDLE_PATH}"
69 | COPY --chown=rails:rails --from=build /rails /rails
70 |
71 | # Entrypoint prepares the database.
72 | ENTRYPOINT ["/rails/bin/docker-entrypoint"]
73 |
74 | # Start server via Thruster by default, this can be overwritten at runtime
75 | EXPOSE 80
76 | CMD ["./bin/thrust", "./bin/rails", "server"]
77 |
--------------------------------------------------------------------------------
/config/environments/development.rb:
--------------------------------------------------------------------------------
1 | require "active_support/core_ext/integer/time"
2 |
3 | Rails.application.configure do
4 | # Settings specified here will take precedence over those in config/application.rb.
5 |
6 | # Make code changes take effect immediately without server restart.
7 | config.enable_reloading = true
8 |
9 | # Do not eager load code on boot.
10 | config.eager_load = false
11 |
12 | # Show full error reports.
13 | config.consider_all_requests_local = true
14 |
15 | # Enable server timing.
16 | config.server_timing = true
17 |
18 | # Enable/disable Action Controller caching. By default Action Controller caching is disabled.
19 | # Run rails dev:cache to toggle Action Controller caching.
20 | if Rails.root.join("tmp/caching-dev.txt").exist?
21 | config.action_controller.perform_caching = true
22 | config.action_controller.enable_fragment_cache_logging = true
23 | config.public_file_server.headers = { "cache-control" => "public, max-age=#{2.days.to_i}" }
24 | else
25 | config.action_controller.perform_caching = false
26 | end
27 |
28 | # Change to :null_store to avoid any caching.
29 | config.cache_store = :memory_store
30 |
31 | # Store uploaded files on the local file system (see config/storage.yml for options).
32 | config.active_storage.service = :local
33 |
34 | # Don't care if the mailer can't send.
35 | config.action_mailer.raise_delivery_errors = false
36 |
37 | # Make template changes take effect immediately.
38 | config.action_mailer.perform_caching = false
39 |
40 | # Set localhost to be used by links generated in mailer templates.
41 | config.action_mailer.default_url_options = { host: "localhost", port: 3000 }
42 |
43 | # Print deprecation notices to the Rails logger.
44 | config.active_support.deprecation = :log
45 |
46 | # Raise an error on page load if there are pending migrations.
47 | config.active_record.migration_error = :page_load
48 |
49 | # Highlight code that triggered database queries in logs.
50 | config.active_record.verbose_query_logs = true
51 |
52 | # Append comments with runtime information tags to SQL queries in logs.
53 | config.active_record.query_log_tags_enabled = true
54 |
55 | # Highlight code that enqueued background job in logs.
56 | config.active_job.verbose_enqueue_logs = true
57 |
58 | # Highlight code that triggered redirect in logs.
59 | config.action_dispatch.verbose_redirect_logs = true
60 |
61 | # Suppress logger output for asset requests.
62 | config.assets.quiet = true
63 |
64 | # Raises error for missing translations.
65 | # config.i18n.raise_on_missing_translations = true
66 |
67 | # Annotate rendered view with file names.
68 | config.action_view.annotate_rendered_view_with_filenames = true
69 |
70 | # Uncomment if you wish to allow Action Cable access from any origin.
71 | # config.action_cable.disable_request_forgery_protection = true
72 |
73 | # Raise error when a before_action's only/except options reference missing actions.
74 | config.action_controller.raise_on_missing_callback_actions = true
75 |
76 | # Apply autocorrection by RuboCop to files generated by `bin/rails generate`.
77 | # config.generators.apply_rubocop_autocorrect_after_generate!
78 | end
79 |
--------------------------------------------------------------------------------
/.github/workflows/ci.yml:
--------------------------------------------------------------------------------
1 | name: CI
2 |
3 | on:
4 | pull_request:
5 | push:
6 | branches: [ main ]
7 |
8 | jobs:
9 | scan_ruby:
10 | runs-on: ubuntu-latest
11 |
12 | steps:
13 | - name: Checkout code
14 | uses: actions/checkout@v5
15 |
16 | - name: Set up Ruby
17 | uses: ruby/setup-ruby@v1
18 | with:
19 | bundler-cache: true
20 |
21 | - name: Scan for common Rails security vulnerabilities using static analysis
22 | run: bin/brakeman --no-pager
23 |
24 | - name: Scan for known security vulnerabilities in gems used
25 | run: bin/bundler-audit
26 |
27 | scan_js:
28 | runs-on: ubuntu-latest
29 |
30 | steps:
31 | - name: Checkout code
32 | uses: actions/checkout@v5
33 |
34 | - name: Set up Ruby
35 | uses: ruby/setup-ruby@v1
36 | with:
37 | bundler-cache: true
38 |
39 | - name: Scan for security vulnerabilities in JavaScript dependencies
40 | run: bin/importmap audit
41 |
42 | lint:
43 | runs-on: ubuntu-latest
44 | env:
45 | RUBOCOP_CACHE_ROOT: tmp/rubocop
46 | steps:
47 | - name: Checkout code
48 | uses: actions/checkout@v5
49 |
50 | - name: Set up Ruby
51 | uses: ruby/setup-ruby@v1
52 | with:
53 | bundler-cache: true
54 |
55 | - name: Prepare RuboCop cache
56 | uses: actions/cache@v4
57 | env:
58 | DEPENDENCIES_HASH: ${{ hashFiles('.ruby-version', '**/.rubocop.yml', '**/.rubocop_todo.yml', 'Gemfile.lock') }}
59 | with:
60 | path: ${{ env.RUBOCOP_CACHE_ROOT }}
61 | key: rubocop-${{ runner.os }}-${{ env.DEPENDENCIES_HASH }}-${{ github.ref_name == github.event.repository.default_branch && github.run_id || 'default' }}
62 | restore-keys: |
63 | rubocop-${{ runner.os }}-${{ env.DEPENDENCIES_HASH }}-
64 |
65 | - name: Lint code for consistent style
66 | run: bin/rubocop -f github
67 |
68 | test:
69 | runs-on: ubuntu-latest
70 |
71 | # services:
72 | # redis:
73 | # image: valkey/valkey:8
74 | # ports:
75 | # - 6379:6379
76 | # options: --health-cmd "redis-cli ping" --health-interval 10s --health-timeout 5s --health-retries 5
77 | steps:
78 | - name: Checkout code
79 | uses: actions/checkout@v5
80 |
81 | - name: Set up Ruby
82 | uses: ruby/setup-ruby@v1
83 | with:
84 | bundler-cache: true
85 |
86 | - name: Run tests
87 | env:
88 | RAILS_ENV: test
89 | # RAILS_MASTER_KEY: ${{ secrets.RAILS_MASTER_KEY }}
90 | # REDIS_URL: redis://localhost:6379/0
91 | run: bin/rails db:test:prepare test
92 |
93 | system-test:
94 | runs-on: ubuntu-latest
95 |
96 | # services:
97 | # redis:
98 | # image: valkey/valkey:8
99 | # ports:
100 | # - 6379:6379
101 | # options: --health-cmd "redis-cli ping" --health-interval 10s --health-timeout 5s --health-retries 5
102 | steps:
103 | - name: Checkout code
104 | uses: actions/checkout@v5
105 |
106 | - name: Set up Ruby
107 | uses: ruby/setup-ruby@v1
108 | with:
109 | bundler-cache: true
110 |
111 | - name: Run System Tests
112 | env:
113 | RAILS_ENV: test
114 | # RAILS_MASTER_KEY: ${{ secrets.RAILS_MASTER_KEY }}
115 | # REDIS_URL: redis://localhost:6379/0
116 | run: bin/rails db:test:prepare test:system
117 |
118 | - name: Keep screenshots from failed system tests
119 | uses: actions/upload-artifact@v4
120 | if: failure()
121 | with:
122 | name: screenshots
123 | path: ${{ github.workspace }}/tmp/screenshots
124 | if-no-files-found: ignore
125 |
--------------------------------------------------------------------------------
/config/environments/production.rb:
--------------------------------------------------------------------------------
1 | require "active_support/core_ext/integer/time"
2 |
3 | Rails.application.configure do
4 | # Settings specified here will take precedence over those in config/application.rb.
5 |
6 | # Code is not reloaded between requests.
7 | config.enable_reloading = false
8 |
9 | # Eager load code on boot for better performance and memory savings (ignored by Rake tasks).
10 | config.eager_load = true
11 |
12 | # Full error reports are disabled.
13 | config.consider_all_requests_local = false
14 |
15 | # Turn on fragment caching in view templates.
16 | config.action_controller.perform_caching = true
17 |
18 | # Cache assets for far-future expiry since they are all digest stamped.
19 | config.public_file_server.headers = { "cache-control" => "public, max-age=#{1.year.to_i}" }
20 |
21 | # Enable serving of images, stylesheets, and JavaScripts from an asset server.
22 | # config.asset_host = "http://assets.example.com"
23 |
24 | # Store uploaded files on the local file system (see config/storage.yml for options).
25 | config.active_storage.service = :local
26 |
27 | # Assume all access to the app is happening through a SSL-terminating reverse proxy.
28 | # config.assume_ssl = true
29 |
30 | # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
31 | # config.force_ssl = true
32 |
33 | # Skip http-to-https redirect for the default health check endpoint.
34 | # config.ssl_options = { redirect: { exclude: ->(request) { request.path == "/up" } } }
35 |
36 | # Log to STDOUT with the current request id as a default log tag.
37 | config.log_tags = [ :request_id ]
38 | config.logger = ActiveSupport::TaggedLogging.logger(STDOUT)
39 |
40 | # Change to "debug" to log everything (including potentially personally-identifiable information!).
41 | config.log_level = ENV.fetch("RAILS_LOG_LEVEL", "info")
42 |
43 | # Prevent health checks from clogging up the logs.
44 | config.silence_healthcheck_path = "/up"
45 |
46 | # Don't log any deprecations.
47 | config.active_support.report_deprecations = false
48 |
49 | # Replace the default in-process memory cache store with a durable alternative.
50 | # config.cache_store = :mem_cache_store
51 |
52 | # Replace the default in-process and non-durable queuing backend for Active Job.
53 | # config.active_job.queue_adapter = :resque
54 |
55 | # Ignore bad email addresses and do not raise email delivery errors.
56 | # Set this to true and configure the email server for immediate delivery to raise delivery errors.
57 | # config.action_mailer.raise_delivery_errors = false
58 |
59 | # Set host to be used by links generated in mailer templates.
60 | config.action_mailer.default_url_options = { host: "example.com" }
61 |
62 | # Specify outgoing SMTP server. Remember to add smtp/* credentials via bin/rails credentials:edit.
63 | # config.action_mailer.smtp_settings = {
64 | # user_name: Rails.application.credentials.dig(:smtp, :user_name),
65 | # password: Rails.application.credentials.dig(:smtp, :password),
66 | # address: "smtp.example.com",
67 | # port: 587,
68 | # authentication: :plain
69 | # }
70 |
71 | # Enable locale fallbacks for I18n (makes lookups for any locale fall back to
72 | # the I18n.default_locale when a translation cannot be found).
73 | config.i18n.fallbacks = true
74 |
75 | # Do not dump schema after migrations.
76 | config.active_record.dump_schema_after_migration = false
77 |
78 | # Only use :id for inspections in production.
79 | config.active_record.attributes_for_inspect = [ :id ]
80 |
81 | # Enable DNS rebinding protection and other `Host` header attacks.
82 | # config.hosts = [
83 | # "example.com", # Allow requests from example.com
84 | # /.*\.example\.com/ # Allow requests from subdomains like `www.example.com`
85 | # ]
86 | #
87 | # Skip DNS rebinding protection for the default health check endpoint.
88 | # config.host_authorization = { exclude: ->(request) { request.path == "/up" } }
89 | end
90 |
--------------------------------------------------------------------------------
/public/404.html:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 | The page you were looking for doesn't exist (404 Not found)
8 |
9 |
10 |
11 |
12 |
13 |
117 |
118 |
119 |
120 |
121 |
122 |
123 |
124 |
125 |
126 |
127 |
128 |
129 |
The page you were looking for doesn't exist. You may have mistyped the address or the page may have moved. If you're the application owner check the logs for more information.
The server cannot process the request due to a client error. Please check the request and try again. If you're the application owner check the logs for more information.
The change you wanted was rejected. Maybe you tried to change something you didn't have access to. If you're the application owner check the logs for more information.