abduroziq.uz

Personal website with a FastAPI backend — monorepo managed with Docker Compose and deployed via Dokploy.

API: api.abduroziq.uz

---

Stack

Layer	Technology
Frontend	Next.js 16, React 19, TypeScript, Tailwind CSS v4, ShadCN UI
Backend	Python 3.12, FastAPI, SQLAlchemy (async), Alembic
Database	PostgreSQL 18
Email	Resend
Auth	GitHub OAuth + JWT (HS256, access + refresh tokens)
Container	Docker, Docker Compose
Reverse proxy	Nginx + Let's Encrypt (self-hosted) / Traefik (Dokploy)
CI/CD	GitHub Actions → GHCR → Dokploy

---

Project structure

my-website/
├── docker-compose.yml           ← base config (shared between dev/prod)
├── docker-compose.override.yml  ← dev overrides (auto-loaded)
├── docker-compose.prod.yml      ← prod overrides (Nginx + Certbot)
├── Makefile                     ← convenience commands
├── .env.dev                     ← dev env vars (committed, no secrets)
├── .env.example                 ← template for .env.prod
├── nginx/conf.d/app.conf        ← HTTP→HTTPS, routing for subdomains
├── frontend/                    ← Next.js public website (port 3000)
└── backend/                     ← FastAPI REST API (port 4000)

---

Getting started

Prerequisites

• Docker with Compose plugin
• make

Development

git clone https://github.com/blogchik/my-website.git
cd my-website
make dev

Services:

Service	URL
Frontend	http://localhost:3000
Backend API	http://localhost:4000
API Docs (dev only)	http://localhost:4000/docs
PostgreSQL	localhost:5432

Hot reload is enabled for all services (Next.js dev server + uvicorn --reload).

Useful commands

make dev          # Start dev environment
make dev-build    # Rebuild images and start
make dev-down     # Stop all services
make dev-logs     # Tail all logs

make db-migrate   # Run pending Alembic migrations
make db-revision m="description"  # Create new migration
make db-shell     # Open PostgreSQL shell
make backend-logs # Tail backend logs

make help         # List all available commands

---

API

Base URL: https://api.abduroziq.uz (production) · http://localhost:4000 (dev)

Public

Method	Path	Description
GET	/health	Health check — DB connectivity, uptime
POST	/contact	Contact form submission (rate limited: 5/hour)

/docs and /redoc are available in development only — disabled in production.

Admin (auth required)

Method	Path	Description
POST	/admin/auth/github/callback	GitHub OAuth token exchange
POST	/admin/auth/refresh	Refresh JWT access token
POST	/admin/auth/logout	Clear refresh cookie
GET	/admin/auth/me	Get current admin info
GET	/admin/health	Health + message stats
GET	/admin/contacts	Paginated contact list with search
GET	/admin/contacts/{id}	Single contact message
PATCH	/admin/contacts/{id}	Mark message read/unread

Rate limits: 100 req/15min global · 5/hour for /contact · 10/hour for OAuth · 30/hour for token refresh.

---

Environment variables

All variables live in the root .env.dev (dev) or .env.prod (prod). Never create .env files inside frontend/ or backend/.

cp .env.example .env.prod
# fill in the values

Key variables:

Variable	Description
NEXT_PUBLIC_API_URL	Backend API URL (baked into frontend at build time)
DATABASE_URL	PostgreSQL async connection string
CORS_ORIGIN	Allowed origin for backend CORS
ADMIN_CORS_ORIGIN	Allowed admin origin for backend CORS
API_DOMAIN	Hostname for TrustedHostMiddleware
RESEND_API_KEY	Resend API key for email notifications
ENVIRONMENT	development or production
GITHUB_CLIENT_ID	GitHub OAuth App client ID (backend)
GITHUB_CLIENT_SECRET	GitHub OAuth App client secret (backend)
ADMIN_GITHUB_ID	GitHub user ID of the authorized admin
JWT_SECRET	HS256 signing key — generate with openssl rand -hex 64
JWT_ACCESS_EXPIRE_MINUTES	Access token lifetime (default: 15)
JWT_REFRESH_EXPIRE_DAYS	Refresh token lifetime (default: 7)

---

Deployment (Dokploy)

CI/CD pipeline on every push to main:

1. Lint — frontend ESLint + tsc, backend ruff — in parallel
2. Security scan — Trivy vulnerability scanner
3. Build & push — Docker images to ghcr.io/blogchik/my-website-{frontend,backend}
4. Deploy — frontend and backend deployed, backend health-checked

Required GitHub Secrets

Secret	Description
ENV_PROD	Full .env.prod contents
DOKPLOY_WEBHOOK_FRONTEND	Dokploy webhook URL for frontend
DOKPLOY_WEBHOOK_BACKEND	Dokploy webhook URL for backend

Dokploy setup

1. Create two applications in Dokploy:
   • Frontend → image ghcr.io/blogchik/my-website-frontend:main, domain abduroziq.uz
   • Backend → image ghcr.io/blogchik/my-website-backend:main, domain api.abduroziq.uz, port 4000
2. Add backend environment variables in the Dokploy Environment tab
3. Add DNS A records: abduroziq.uz, api.abduroziq.uz → VPS IP
4. Push to main — GitHub Actions builds and deploys automatically

---

Self-hosted (Docker Compose + Nginx)

Alternative to Dokploy for VPS with direct SSH access:

cp .env.example .env.prod
# edit .env.prod — set DOMAIN, CERTBOT_EMAIL, DATABASE_URL, etc.

sed -i 's/yourdomain.com/abduroziq.uz/g' nginx/conf.d/app.conf

make ssl-init   # obtain first SSL certificate (one-time)
make prod       # start production

---

License

Apache 2.0 — see LICENSE