This document provides detailed security measures tailored for applications using Node.js with Postgres or MySQL, including authentication, authorization, file uploads, Stripe integration, and more. It emphasizes the importance of rebuilding safety nets such as Postgres Row Level Security and implementing strict ownership checks to mitigate risks associated with direct database access. Additionally, it covers best practices for CORS, CSRF protection, error handling, and secrets management, ensuring a comprehensive approach to securing the stack. |
||
|---|---|---|
| .claude | ||
| .rtk | ||
| frontend | ||
| panel | ||
| .gitattributes | ||
| .gitignore | ||
| .liaraignore | ||
| ADVERSARIAL-ARCHITECTURE-REVIEW.md | ||
| CLAUDE copy.md | ||
| CLAUDE.md | ||
| README.md | ||
| README_FA.md | ||
| SECURITY-CHECKLIST.md | ||
| SECURITY.md | ||
| STACK-HARDENING-Node-Postgres.md | ||
| design-system.md | ||
| docker-compose.yml | ||
| liara-deploy.md | ||
README.md
| title | emoji | colorFrom | colorTo | sdk | app_port | pinned |
|---|---|---|---|---|---|---|
| Andishkade Foolad | 🏭 | indigo | gray | docker | 7860 | false |
React + TypeScript + Vite
This template provides a minimal setup to get React working in Vite with HMR and some ESLint rules.
Run locally with Docker
# Build and start (foreground)
docker compose up --build
# Or detached
docker compose up -d --build
# Stop
docker compose down
The app will be available at http://localhost:7860.
Deploy to Hugging Face Spaces
- Create a new Space → SDK: Docker → Blank.
- Push this repo (including
Dockerfile,nginx.conf, and the README frontmatter above). - Spaces reads
app_port: 7860from the frontmatter and routes traffic to the container automatically — no further config needed.
Currently, two official plugins are available:
- @vitejs/plugin-react uses Oxc
- @vitejs/plugin-react-swc uses SWC
React Compiler
The React Compiler is not enabled on this template because of its impact on dev & build performances. To add it, see this documentation.
Expanding the ESLint configuration
If you are developing a production application, we recommend updating the configuration to enable type-aware lint rules:
export default defineConfig([
globalIgnores(['dist']),
{
files: ['**/*.{ts,tsx}'],
extends: [
// Other configs...
// Remove tseslint.configs.recommended and replace with this
tseslint.configs.recommendedTypeChecked,
// Alternatively, use this for stricter rules
tseslint.configs.strictTypeChecked,
// Optionally, add this for stylistic rules
tseslint.configs.stylisticTypeChecked,
// Other configs...
],
languageOptions: {
parserOptions: {
project: ['./tsconfig.node.json', './tsconfig.app.json'],
tsconfigRootDir: import.meta.dirname,
},
// other options...
},
},
])
You can also install eslint-plugin-react-x and eslint-plugin-react-dom for React-specific lint rules:
// eslint.config.js
import reactX from 'eslint-plugin-react-x'
import reactDom from 'eslint-plugin-react-dom'
export default defineConfig([
globalIgnores(['dist']),
{
files: ['**/*.{ts,tsx}'],
extends: [
// Other configs...
// Enable lint rules for React
reactX.configs['recommended-typescript'],
// Enable lint rules for React DOM
reactDom.configs.recommended,
],
languageOptions: {
parserOptions: {
project: ['./tsconfig.node.json', './tsconfig.app.json'],
tsconfigRootDir: import.meta.dirname,
},
// other options...
},
},
])
"# thinktank" "# thinktank" git init git add git commit -m "first commit" git branch -M main git remote add origin https://github.com/alirezaameria2-dev/thinktank.git git push -u origin main "# thinktank" git init git add git commit -m "first commit" git branch -M main git remote add origin https://github.com/alirezaameria2-dev/thinktank.git git push -u origin main