feat: enhance Dockerfile and entrypoint for user permissions and environment variable handling

.gitea/workflows/publish.yaml

@@ -0,0 +1,48 @@
+name: Build and publish Docker image
+
+on:
+  release:
+    types: [published]
+
+env:
+  REGISTRY: gitea.kanawave.net
+  REGISTRY_USERNAME: sebastas
+  IMAGE_NAME: ${{ gitea.repository }}
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+
+    # Permissions are not yet supported in Gitea Actions -> https://github.com/go-gitea/gitea/issues/23642#issuecomment-2119876692
+    # permissions:
+    #   contents: read
+    #   packages: write
+    #   attestations: write
+    #   id-token: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Login to registry
+        uses: docker/login-action@v2
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ env.REGISTRY_USERNAME }}
+          password: ${{ secrets.REGISTRY_TOKEN }}
+
+      - name: Extract metadata (tags, labels)
+        id: meta
+        uses: docker/metadata-action@v4
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+
+      - name: Build and push
+        id: push
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          # file: ./Dockerfile
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}

Dockerfile

@@ -1,39 +1,32 @@
 # Build frontend in a dedicated stage
-FROM node:24-slim AS frontend-build
+FROM node:24-alpine AS frontend-build
 WORKDIR /app/frontend
 COPY frontend/package*.json frontend/package-lock*.json ./
 RUN npm ci --silent
 COPY frontend/ .
 RUN npm run build
 
-# Final image: build backend, generate Prisma client, prune dev deps, and include frontend dist
-FROM node:24-slim AS final
+# Final runtime image
+FROM node:24-alpine
 WORKDIR /app
 
-# install minimal OS deps
-RUN apt-get update -y \
-&& apt-get install -y openssl
+# ensure su-exec present to drop privileges later
+RUN apk add --no-cache ca-certificates su-exec
 
 # copy package manifests and install deps (leverage Docker cache)
 COPY backend/package*.json backend/package-lock*.json ./backend/
 RUN cd backend && npm ci --silent
-
 # copy backend source (schema, migrations, source)
 COPY backend ./backend
-
 # generate Prisma client against a harmless temp DB path (does not apply migrations)
 RUN cd backend && DATABASE_URL="file:./data/sqlite.db" npx prisma generate --schema=./prisma/schema.prisma || true
-
 # remove devDependencies to slim image
 RUN cd backend && npm prune --production --silent
-
 # install prisma CLI into final image so entrypoint can run migrate deploy at runtime
 RUN cd backend && npm i --no-audit --no-fund prisma --silent || true
-
-# copy entrypoint (added below) and make executable
+# copy entrypoint and make executable
 COPY docker/entrypoint.sh /usr/local/bin/entrypoint.sh
 RUN chmod +x /usr/local/bin/entrypoint.sh
-
 # Copy built frontend into the expected location: /app/frontend/dist
 COPY --from=frontend-build /app/frontend/dist ./frontend/dist
 

README.md

@@ -0,0 +1,31 @@
+# Tally Counter
+
+Run the app with Docker Compose (recommended). The container startup/entrypoint will create the runtime folders and apply migrations; pass numeric PUID/PGID via environment to run as a non-root user.
+
+
+```yaml
+services:
+  tally-counter:
+    image: gitea.kanawave.net/sebastas/tally-counter:latest     #this image
+    container_name: tally-counter
+    restart: unless-stopped
+    networks:
+      - proxy   # connect any proxy networks (for traefik)
+    environment:
+      - PUID=1000   # host uid forwarded to container
+      - PGID=1000   # host gid forwarded to container
+    ports:
+      - "3000:3000" # Set whatever port you want on the left side (host)
+    volumes:
+      - ./tally-counter:/data         # persistent DB + uploads (bind mount)
+```
+
+Add any `labels` for traefik
+
+### Notes & tips
+
+The entrypoint will:
+- ensure `$DATA_DIR` exists,
+- create `sqlite.db` if missing,
+- run `prisma migrate deploy` (if CLI available and migrations exist),
+- then drop privileges to the provided `PUID:PGID` and exec the app.

docker/entrypoint.sh

@@ -3,27 +3,50 @@ set -eu
 
 DATA_DIR="${DATA_DIR:-/data}"
 SCHEMA_PATH="./prisma/schema.prisma"
+PUID="${PUID:-}"
+PGID="${PGID:-$PUID}"
 
-# ensure data dir exists and is writable
 mkdir -p "$DATA_DIR"
 chmod 0775 "$DATA_DIR" || true
 
-# ensure DATABASE_URL is set to the runtime DATA_DIR
 : "${DATABASE_URL:=file:${DATA_DIR}/sqlite.db}"
 export DATABASE_URL
 
-# create sqlite file if missing
 SQLITE_DB_PATH="${DATA_DIR}/sqlite.db"
 if [ ! -f "$SQLITE_DB_PATH" ]; then
   touch "$SQLITE_DB_PATH"
   chmod 0664 "$SQLITE_DB_PATH" || true
 fi
 
-# run non-interactive migrations if CLI available
+# run migrations if prisma CLI available
 if command -v npx >/dev/null 2>&1 && [ -f "$SCHEMA_PATH" ]; then
   echo "Running prisma migrate deploy..."
   npx prisma migrate deploy --schema="$SCHEMA_PATH" || echo "prisma migrate deploy failed or no migrations to apply"
 fi
 
-# exec main process
+# If root and numeric PUID supplied, create/reuse group by GID then create user and chown
+if [ "$(id -u)" = "0" ] && [ -n "$PUID" ]; then
+  # try find an existing group with this GID
+  existing_group="$(getent group | awk -F: -v gid="$PGID" '$3==gid{print $1; exit}')"
+  if [ -n "$existing_group" ]; then
+    grp="$existing_group"
+  else
+    grp="appgroup"
+    addgroup -g "${PGID}" "$grp" 2>/dev/null || true
+  fi
+
+  if ! id -u app >/dev/null 2>&1; then
+    adduser -D -u "${PUID}" -G "$grp" -s /bin/sh app 2>/dev/null || true
+  fi
+
+  # ensure runtime paths writable by numeric ids
+  chown -R "${PUID}:${PGID}" "$DATA_DIR" /app/backend /app/frontend/dist 2>/dev/null || true
+
+  # drop privileges and run command
+  echo "Running as user: "${PUID}""
+  echo "Running as group: "${PGID}""
+  exec su-exec "${PUID}:${PGID}" "$@"
+fi
+
+# otherwise run as current user
 exec "$@"

frontend/src/App.css

@@ -415,6 +415,37 @@ html, body, #root {
   outline-offset: 8px;
 }
 
+/* container grid */
+.counters-grid {
+  display: grid;
+  gap: 16px;
+  grid-template-columns: repeat(auto-fit, minmax(260px, 1fr));
+  max-width: var(--max-width);
+  margin: 0 auto;
+  justify-content: center;
+  align-items: start;
+}
+
+/* keep each card centered in its cell and center its inner content */
+.counters-grid > .counter-card {
+  justify-self: center;
+  width: 100%;
+  max-width: 460px;
+  box-sizing: border-box;
+  padding: 12px;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+}
+
+/* ensure the actual counter element stays centered and doesn't stretch awkwardly */
+.counter-card .counter {
+  width: 100%;
+  max-width: 420px;
+  margin: 0 auto;
+  display: flex; 
+}
+
 /* ---------------------------
    Utilities / footer
    --------------------------- */

frontend/src/App.tsx

@@ -1,4 +1,4 @@
-import React, { useEffect, useState, useCallback } from 'react'
+import React, { useCallback, useEffect, useMemo, useRef, useState } from 'react'
 import Counter from './components/Counter'
 import CreateCounter from './components/CreateCounter'
 import { apiUrl } from './utils/api'
@@ -6,6 +6,13 @@ import './App.css'
 
 type CounterRecord = { id: number; value: number; name?: string; imageUrl?: string; position?: number }
 
+// small pure helper kept outside the component so it's stable
+const swapInArray = (arr: CounterRecord[], i: number, j: number) => {
+  const copy = arr.slice()
+  ;[copy[i], copy[j]] = [copy[j], copy[i]]
+  return copy
+}
+
 export default function App() {
   const [counters, setCounters] = useState<CounterRecord[]>([])
   const [loading, setLoading] = useState(true)
@@ -13,33 +20,46 @@ export default function App() {
   const [draggingId, setDraggingId] = useState<number | null>(null)
   const [dragOverId, setDragOverId] = useState<number | null>(null)
 
+  // track which modal ids are currently open (idempotent)
+  const [modalOpenSet, setModalOpenSet] = useState<Set<number>>(new Set())
+  const draggingEnabled = useMemo(() => modalOpenSet.size === 0, [modalOpenSet])
+
+  // helper: idempotently add/remove modal id
+  const handleEditingChange = useCallback((id: number, editing: boolean) => {
+    setModalOpenSet((prev) => {
+      const next = new Set(prev)
+      if (editing) next.add(id)
+      else next.delete(id)
+      return next
+    })
+  }, [])
+
+  // mounted ref to avoid setting state on unmounted component
+  const mountedRef = useRef(true)
+  useEffect(() => {
+    mountedRef.current = true
+    return () => {
+      mountedRef.current = false
+    }
+  }, [])
+
   useEffect(() => {
-    let mounted = true
     ;(async () => {
       try {
         const res = await fetch(apiUrl('/api/counters'))
         const list: CounterRecord[] = await res.json()
-        if (!mounted) return
+        if (!mountedRef.current) return
         setCounters(Array.isArray(list) ? list : [])
       } catch (err) {
+        // keep minimal logging here
         console.error('failed to load counters', err)
-        if (mounted) setCounters([])
+        if (mountedRef.current) setCounters([])
       } finally {
-        if (mounted) setLoading(false)
+        if (mountedRef.current) setLoading(false)
       }
     })()
-    return () => {
-      mounted = false
-    }
   }, [])
 
-  // swap two items in an array (keeps array length and only swaps the two indexes)
-  const swapInArray = (arr: CounterRecord[], i: number, j: number) => {
-    const copy = arr.slice()
-    ;[copy[i], copy[j]] = [copy[j], copy[i]]
-    return copy
-  }
-
   const clearDragState = useCallback(() => {
     setDraggingId(null)
     setDragOverId(null)
@@ -121,130 +141,137 @@ export default function App() {
     clearDragState()
   }, [clearDragState])
 
-  const handleChange = async (id: number, next: number) => {
-    // enforce non-negative values
-    const safeNext = Math.max(0, next)
+  const handleChange = useCallback(
+    async (id: number, next: number) => {
+      // enforce non-negative values
+      const safeNext = Math.max(0, next)
 
-    const idx = counters.findIndex((c) => c.id === id)
-    if (idx === -1) return
+      const idx = counters.findIndex((c) => c.id === id)
+      if (idx === -1) return
 
-    const prev = counters[idx].value
-    // optimistic update (use safeNext)
-    setCounters((prevList) => prevList.map((c) => (c.id === id ? { ...c, value: safeNext } : c)))
-    setSavingIds((s) => {
-      const n = new Set(s)
-      n.add(id)
-      return n
-    })
-
-    try {
-      const res = await fetch(apiUrl(`/api/counters/${id}`), {
-        method: 'PATCH',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify({ value: safeNext }),
-      })
-      if (!res.ok) throw new Error('patch failed')
-      const updated: CounterRecord = await res.json().catch(() => null)
-      if (updated) {
-        setCounters((prevList) => prevList.map((c) => (c.id === updated.id ? updated : c)))
-      }
-    } catch (err) {
-      console.error('save failed', err)
-      // revert
-      setCounters((prevList) => prevList.map((c) => (c.id === id ? { ...c, value: prev } : c)))
-    } finally {
+      const prev = counters[idx].value
+      // optimistic update (use safeNext)
+      setCounters((prevList) => prevList.map((c) => (c.id === id ? { ...c, value: safeNext } : c)))
       setSavingIds((s) => {
         const n = new Set(s)
-        n.delete(id)
+        n.add(id)
         return n
       })
-    }
-  }
 
-  const handleCreated = (c: CounterRecord) => {
+      try {
+        const res = await fetch(apiUrl(`/api/counters/${id}`), {
+          method: 'PATCH',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ value: safeNext }),
+        })
+        if (!res.ok) throw new Error('patch failed')
+        const updated: CounterRecord = await res.json().catch(() => null)
+        if (updated) {
+          setCounters((prevList) => prevList.map((c) => (c.id === updated.id ? updated : c)))
+        }
+      } catch (err) {
+        console.error('save failed', err)
+        // revert
+        setCounters((prevList) => prevList.map((c) => (c.id === id ? { ...c, value: prev } : c)))
+      } finally {
+        setSavingIds((s) => {
+          const n = new Set(s)
+          n.delete(id)
+          return n
+        })
+      }
+    },
+    [counters]
+  )
+
+  const handleCreated = useCallback((c: CounterRecord) => {
     setCounters((prev) => [...prev, c])
-  }
+  }, [])
 
-  // onUpdate: upload file (if present), then PATCH name/imageUrl for given id
-  const handleUpdate = async (id: number, payload: { name?: string; file?: File | null }) => {
-    setSavingIds((s) => {
-      const n = new Set(s)
-      n.add(id)
-      return n
-    })
-
-    try {
-      let imageUrl: string | null | undefined = undefined
-
-      if (payload.file) {
-        const fd = new FormData()
-        fd.append('file', payload.file)
-        const up = await fetch(apiUrl('/api/upload'), { method: 'POST', body: fd })
-        if (!up.ok) throw new Error('upload failed')
-        const body = await up.json().catch(() => null)
-        imageUrl = body?.url ?? null
-      }
-
-      const patchBody: any = {}
-      if (payload.name !== undefined) patchBody.name = payload.name
-      if (payload.file) patchBody.imageUrl = imageUrl
-
-      if (Object.keys(patchBody).length === 0) {
-        // nothing to do
-        return
-      }
-
-      const res = await fetch(apiUrl(`/api/counters/${id}`), {
-        method: 'PATCH',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify(patchBody),
-      })
-      if (!res.ok) throw new Error(`update failed (${res.status})`)
-      const updated: CounterRecord = await res.json().catch(() => null)
-      if (updated) {
-        setCounters((prevList) => prevList.map((c) => (c.id === updated.id ? updated : c)))
-      } else {
-        // best-effort local apply if server didn't return the updated object
-        setCounters((prevList) =>
-          prevList.map((c) => (c.id === id ? { ...c, name: payload.name ?? c.name, imageUrl: imageUrl ?? c.imageUrl } : c))
-        )
-      }
-    } catch (err) {
-      console.error('update failed', err)
-      throw err
-    } finally {
+  const handleUpdate = useCallback(
+    async (id: number, payload: { name?: string; file?: File | null }) => {
       setSavingIds((s) => {
         const n = new Set(s)
-        n.delete(id)
+        n.add(id)
         return n
       })
-    }
-  }
 
-  // added delete handler
-  const handleDelete = async (id: number) => {
-    setSavingIds((s) => {
-      const n = new Set(s)
-      n.add(id)
-      return n
-    })
+      try {
+        let imageUrl: string | null | undefined = undefined
 
-    try {
-      const res = await fetch(apiUrl(`/api/counters/${id}`), { method: 'DELETE' })
-      if (!res.ok) throw new Error(`delete failed (${res.status})`)
-      // remove locally
-      setCounters((prev) => prev.filter((c) => c.id !== id))
-    } catch (err) {
-      console.error('delete failed', err)
-      throw err
-    } finally {
+        if (payload.file) {
+          const fd = new FormData()
+          fd.append('file', payload.file)
+          const up = await fetch(apiUrl('/api/upload'), { method: 'POST', body: fd })
+          if (!up.ok) throw new Error('upload failed')
+          const body = await up.json().catch(() => null)
+          imageUrl = body?.url ?? null
+        }
+
+        const patchBody: any = {}
+        if (payload.name !== undefined) patchBody.name = payload.name
+        if (payload.file) patchBody.imageUrl = imageUrl
+
+        if (Object.keys(patchBody).length === 0) {
+          // nothing to do
+          return
+        }
+
+        const res = await fetch(apiUrl(`/api/counters/${id}`), {
+          method: 'PATCH',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify(patchBody),
+        })
+        if (!res.ok) throw new Error(`update failed (${res.status})`)
+        const updated: CounterRecord = await res.json().catch(() => null)
+        if (updated) {
+          setCounters((prevList) => prevList.map((c) => (c.id === updated.id ? updated : c)))
+        } else {
+          // best-effort local apply if server didn't return the updated object
+          setCounters((prevList) =>
+            prevList.map((c) => (c.id === id ? { ...c, name: payload.name ?? c.name, imageUrl: imageUrl ?? c.imageUrl } : c))
+          )
+        }
+      } catch (err) {
+        console.error('update failed', err)
+        throw err
+      } finally {
+        setSavingIds((s) => {
+          const n = new Set(s)
+          n.delete(id)
+          return n
+        })
+      }
+    },
+    []
+  )
+
+  const handleDelete = useCallback(
+    async (id: number) => {
       setSavingIds((s) => {
         const n = new Set(s)
-        n.delete(id)
+        n.add(id)
         return n
       })
-    }
-  }
+
+      try {
+        const res = await fetch(apiUrl(`/api/counters/${id}`), { method: 'DELETE' })
+        if (!res.ok) throw new Error(`delete failed (${res.status})`)
+        // remove locally
+        setCounters((prev) => prev.filter((c) => c.id !== id))
+      } catch (err) {
+        console.error('delete failed', err)
+        throw err
+      } finally {
+        setSavingIds((s) => {
+          const n = new Set(s)
+          n.delete(id)
+          return n
+        })
+      }
+    },
+    []
+  )
 
   if (loading) return <div className="loading">Loading counters…</div>
 
@@ -267,31 +294,34 @@ export default function App() {
             <p>Create your first counter to begin tracking.</p>
           </div>
         ) : (
-          <div className="counters-grid" style={{ display: 'grid', gap: 16, gridTemplateColumns: 'repeat(auto-fit, minmax(260px, 1fr))' }}>
-            {counters.map((c) => (
-              <div
-                key={c.id}
-                className={`counter-card card ${draggingId === c.id ? 'dragging' : ''} ${dragOverId === c.id ? 'drag-over' : ''}`}
-                draggable={true}
-                onDragStart={(e) => handleDragStart(e, c.id)}
-                onDragEnter={(e) => handleDragOver(e, c.id)}
-                onDragOver={(e) => handleDragOver(e, c.id)}
-                onDrop={(e) => handleDropOnCard(e, c.id)}
-                onDragEnd={handleDragEnd}
-              >
-                <Counter
-                  id={String(c.id)}
-                  label={c.name ?? 'Counter'}
-                  value={c.value}
-                  min={0}
-                  isSaving={savingIds.has(c.id)}
-                  imageUrl={c.imageUrl}
-                  onChange={(next) => handleChange(c.id, next)}
-                  onUpdate={(payload) => handleUpdate(c.id, payload)}
-                  onDelete={() => handleDelete(c.id)}
-                />
-              </div>
-            ))}
+          <div className="counters-grid">
+            {counters.map((c) => {
+              return (
+                <div
+                  key={c.id}
+                  className={`counter-card card ${draggingId === c.id ? 'dragging' : ''} ${dragOverId === c.id ? 'drag-over' : ''}`}
+                  draggable={draggingEnabled}
+                  onDragStart={draggingEnabled ? (e) => handleDragStart(e, c.id) : undefined}
+                  onDragEnter={draggingEnabled ? (e) => handleDragOver(e, c.id) : undefined}
+                  onDragOver={draggingEnabled ? (e) => handleDragOver(e, c.id) : undefined}
+                  onDrop={draggingEnabled ? (e) => handleDropOnCard(e, c.id) : undefined}
+                  onDragEnd={draggingEnabled ? handleDragEnd : undefined}
+                >
+                  <Counter
+                    id={String(c.id)}
+                    label={c.name ?? 'Counter'}
+                    value={c.value}
+                    min={0}
+                    isSaving={savingIds.has(c.id)}
+                    imageUrl={c.imageUrl}
+                    onChange={(next) => handleChange(c.id, next)}
+                    onUpdate={(payload) => handleUpdate(c.id, payload)}
+                    onDelete={() => handleDelete(c.id)}
+                    onEditingChange={(editing: boolean) => handleEditingChange(c.id, editing)}
+                  />
+                </div>
+              )
+            })}
           </div>
         )}
       </main>

frontend/src/components/Counter.tsx

@@ -15,6 +15,7 @@ interface CounterProps {
 
   onUpdate?: (payload: { name?: string; file?: File | null }) => Promise<void> | void
   onDelete?: () => Promise<void> | void    // added delete prop
+  onEditingChange?: (editing: boolean) => void
 }
 
 const clamp = (v: number, min?: number, max?: number) => {
@@ -36,6 +37,7 @@ const Counter: React.FC<CounterProps> = ({
   isSaving = false,
   onUpdate,
   onDelete,
+  onEditingChange,
 }) => {
   const setValue = useCallback(
     (next: number) => {
@@ -97,23 +99,26 @@ const Counter: React.FC<CounterProps> = ({
     setEditName(label ?? '')
     setEditFile(null)
     setEditing(true)
-  }, [label])
+  }, [label, onEditingChange])
 
   const closeEdit = useCallback(() => {
     setEditing(false)
     setEditFile(null)
     setPreviewUrl(null)
-  }, [])
+  }, [onEditingChange])
 
   const handleSave = useCallback(async () => {
     if (!onUpdate) {
+      // close and notify parent
       setEditing(false)
+      onEditingChange?.(false)
       return
     }
     try {
       setSavingLocal(true)
       await onUpdate({ name: editName || undefined, file: editFile })
       setEditing(false)
+      onEditingChange?.(false)
     } catch (err) {
       console.error('update failed', err)
     } finally {
@@ -128,6 +133,7 @@ const Counter: React.FC<CounterProps> = ({
       await onDelete()
       // close modal locally (parent will remove the card)
       setEditing(false)
+      onEditingChange?.(false)
     } catch (err) {
       console.error('delete failed', err)
     } finally {
@@ -135,6 +141,20 @@ const Counter: React.FC<CounterProps> = ({
     }
   }, [onDelete])
 
+  // Call the latest onEditingChange but only re-run when `editing` toggles.
+  // This avoids re-running the effect when the parent's callback identity changes.
+  const onEditingChangeRef = useRef(onEditingChange)
+  useEffect(() => {
+    onEditingChangeRef.current = onEditingChange
+  }, [onEditingChange])
+
+  useEffect(() => {
+    onEditingChangeRef.current?.(editing)
+    return () => {
+      if (editing) onEditingChangeRef.current?.(false)
+    }
+  }, [editing])
+
   return (
     <div
       className={className ?? 'counter'}