feat(infra): Docker-compose configuration and environment-specific security guards for Beta deployment to Test environment (#56)

This pull request introduces the dedicated containerized infrastructure and configuration for deploying NexusReader's beta version in the Test environment.

### Summary of Changes

1. **Docker Infrastructure & Secrets**:
   - **`docker-compose.test.yml`**: Configured dedicated database and auxiliary services (PostgreSQL 17, Qdrant, Neo4j) on isolated, non-standard ports to ensure zero conflict with the existing server configurations.
   - **`.env.test.template`**: Provided an environment variable template showing required setups, including mandatory database passwords, API keys, and admin custom passwords.
   - **`.gitignore`**: Excluded local `.env` files to prevent accidental commits of production or staging secrets.

2. **Database Hardening**:
   - Configured Neo4j with basic authentication (`IDriver` instantiation uses basic auth when credentials are provided in configuration).
   - Configured PostgreSQL to use mandatory authentication.
   - Configured the admin seeder (`DbInitializer.cs`) to dynamically use `NEXUS_ADMIN_PASSWORD` from environment variables, falling back to a default password in local Development only.

3. **Feature-Flagged Restrictions**:
   - **`appsettings.Test.json`**: Implemented `Features:AllowRegistration` and `Features:AllowPasswordReset` flags set to `false`.
   - **Middleware Enforcement (`Program.cs`)**: Intercepts requests to `/identity/register` and `/identity/forgotPassword` (and their MVC/form variations) and rejects them with a `403 Forbidden` response in restricted environments.
   - **OAuth Provisioning Guard (`Program.cs`)**: Blocks new account provisioning via Google OAuth callback by checking the `Features:AllowRegistration` configuration, redirecting users to the login page with a descriptive error.
   - **UI Protection (`Login.razor`, `Register.razor`)**: Conditionally hides registration/password reset links and intercepts manual navigation attempts to `/account/register` by redirecting to login with a warning.

---------

Co-authored-by: Marek Jasiński <jasins.marek@gmail.com>
Reviewed-on: #56
Co-authored-by: Antigravity <antigravity@google.com>
Co-committed-by: Antigravity <antigravity@google.com>
This commit was merged in pull request #56.
This commit is contained in:
2026-06-01 17:17:45 +00:00
committed by Marek Jaisński
parent 72905aa119
commit 711480f8f6
54 changed files with 4181 additions and 282 deletions
@@ -258,4 +258,118 @@
@keyframes fadeIn {
from { opacity: 0; }
to { opacity: 1; }
}
}
/* MOBILE READER UI OVERRIDES */
@media (max-width: 768px) {
.reader-canvas {
padding-top: 54px !important;
padding-bottom: 80px !important; /* Ensure content is clear of bottom toolbar */
}
.reader-flow-container {
padding-bottom: 4rem; /* Safe breathing room */
}
}
.nexus-mobile-reader-header {
position: fixed;
top: 0;
left: 0;
width: 100vw;
height: 50px;
background: rgba(18, 18, 18, 0.75);
backdrop-filter: blur(20px);
-webkit-backdrop-filter: blur(20px);
border-bottom: 1px solid rgba(255, 255, 255, 0.08);
display: flex;
align-items: center;
padding: 0 1rem;
z-index: 1000;
box-sizing: border-box;
}
.theme-light .nexus-mobile-reader-header {
background: rgba(249, 249, 249, 0.8);
border-bottom-color: rgba(0, 0, 0, 0.08);
}
.nexus-mobile-escape-btn {
background: none;
border: none;
display: flex;
align-items: center;
gap: 4px;
color: var(--nexus-neon, #00FF99);
font-size: 0.8rem;
font-weight: 600;
cursor: pointer;
padding: 8px 12px;
border-radius: 8px;
transition: background-color 0.2s ease;
margin-left: -8px;
}
.nexus-mobile-escape-btn:active {
background-color: rgba(0, 255, 153, 0.08);
}
.nexus-mobile-chapter-navigation {
flex: 1;
display: flex;
align-items: center;
justify-content: center;
gap: 0.25rem;
height: 100%;
min-width: 0;
}
.nexus-mobile-chapter-title {
flex: 1;
text-align: center;
font-size: 0.8rem;
font-weight: 600;
color: #FFFFFF;
white-space: nowrap;
overflow: hidden;
text-overflow: ellipsis;
padding: 0 0.5rem;
min-width: 0;
}
.theme-light .nexus-mobile-chapter-title {
color: #1a1a1a;
}
.nexus-chapter-nav-btn {
background: none;
border: none;
display: flex;
align-items: center;
justify-content: center;
width: 28px;
height: 28px;
border-radius: 50%;
color: rgba(255, 255, 255, 0.5);
cursor: pointer;
transition: all 0.2s ease;
padding: 0;
}
.nexus-chapter-nav-btn:hover:not(:disabled) {
color: var(--nexus-neon, #00FF99);
background: rgba(255, 255, 255, 0.06);
}
.nexus-chapter-nav-btn:disabled {
opacity: 0.2;
cursor: not-allowed;
}
.theme-light .nexus-chapter-nav-btn {
color: rgba(0, 0, 0, 0.5);
}
.theme-light .nexus-chapter-nav-btn:hover:not(:disabled) {
background: rgba(0, 0, 0, 0.06);
}