- ui improvements (better logo, styles, meta tags)

- fixed work on linux

Author: Max Azatian

README.md

@@ -1,5 +1,5 @@
 <p align="center">
- <img src="./files_for_readme/logo.png" alt="Integr8sCode Logo" width="200" height="200">
+ <img src="./files_for_readme/logo.png" alt="Integr8sCode Logo" width="250" height="250">
  <h1 align="center"><b>Integr8sCode</b></h1>
 </p>
 <p align="center">

backend/Dockerfile

@@ -5,9 +5,9 @@ WORKDIR /app
 RUN apt-get update && apt-get upgrade -y liblzma-dev liblzma5 xz-utils && \
     rm -rf /var/lib/apt/lists/*
 
-# Install kubectl
-RUN curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" \
-    && chmod +x kubectl && mv kubectl /usr/local/bin/
+# Install kubectl (lightweight)
+RUN wget -q "https://dl.k8s.io/release/v1.28.0/bin/linux/amd64/kubectl" -O /usr/local/bin/kubectl && \
+    chmod +x /usr/local/bin/kubectl
 
 # Install Python dependencies
 COPY requirements.txt .

cert-generator/Dockerfile

@@ -1,7 +1,7 @@
 FROM alpine:3.17
 
 # Install required packages and tools for all architectures
-RUN apk add --no-cache wget ca-certificates openssl curl dos2unix && \
+RUN apk add --no-cache wget ca-certificates openssl curl dos2unix netcat-openbsd && \
     update-ca-certificates && \
     # Detect architecture and install appropriate binaries
     ARCH=$(uname -m); \

cert-generator/setup-k8s.sh

@@ -16,13 +16,53 @@ else
 fi
 echo "--- End Debug Info ---"
 
+# Function to detect the correct host IP for k3s access from Docker
+detect_docker_host_ip() {
+  # First check if K3S_HOST_IP environment variable is explicitly set
+  if [ -n "$K3S_HOST_IP" ]; then
+    echo "$K3S_HOST_IP"
+    return
+  fi
+  
+  # Try host.docker.internal first (works on Docker Desktop for Mac/Windows)
+  if getent hosts host.docker.internal > /dev/null 2>&1; then
+    echo "host.docker.internal"
+    return
+  fi
+  
+  # If host.docker.internal doesn't work, try to ping it to see if it resolves
+  if ping -c 1 host.docker.internal > /dev/null 2>&1; then
+    echo "host.docker.internal"
+    return
+  fi
+  
+  # Check if we're using host networking (no .dockerenv means host network)
+  if [ ! -f /.dockerenv ]; then
+    echo "127.0.0.1"
+    return
+  fi
+  
+  # Fall back to Docker bridge gateway (typically Linux)
+  echo "172.17.0.1"
+}
+
 if [ "$CI" = "true" ] && [ -f /root/.kube/config ]; then
   echo "CI environment detected. Creating a patched kubeconfig..."
   # Read from the read-only original and write the patched version to our new file
   sed 's|server: https://127.0.0.1:6443|server: https://host.docker.internal:6443|g' /root/.kube/config > "${WRITABLE_KUBECONFIG_DIR}/config"
-
-  # Point the KUBECONFIG variable to our new, writable, and patched file
-  export KUBECONFIG="${WRITABLE_KUBECONFIG_DIR}/config"
+elif [ -f /root/.kube/config ] && grep -q "server:" /root/.kube/config; then
+  echo "Detected kubeconfig with k3s/k8s. Patching for Docker access..."
+  # For non-CI environments, we need to ensure k3s is accessible from within Docker
+  # Try to detect if we're in Docker and k3s is on the host
+  if [ -f /.dockerenv ]; then
+    # We're in a Docker container - need to patch the config
+    DOCKER_HOST_IP=$(detect_docker_host_ip)
+    echo "Detected Docker host IP: ${DOCKER_HOST_IP}"
+    
+    sed "s|server: https://[^:]*:6443|server: https://${DOCKER_HOST_IP}:6443|g" /root/.kube/config > "${WRITABLE_KUBECONFIG_DIR}/config"
+    echo "Patched kubeconfig to use ${DOCKER_HOST_IP} for k3s access from Docker"
+    export KUBECONFIG="${WRITABLE_KUBECONFIG_DIR}/config"
+  fi
 
   echo "Kubeconfig patched and new config is at ${KUBECONFIG}."
   echo "--- Patched Kubeconfig Contents ---"
@@ -60,6 +100,12 @@ openssl req -x509 -newkey rsa:2048 -nodes \
 cp "$BACKEND_CERT_DIR/server.crt" "$FRONTEND_CERT_DIR/server.crt"
 cp "$BACKEND_CERT_DIR/server.key" "$FRONTEND_CERT_DIR/server.key"
 
+# Copy the certificate to shared CA directory so frontend proxy can trust it
+if [ -n "$SHARED_CA_DIR" ]; then
+    cp "$BACKEND_CERT_DIR/server.crt" "$SHARED_CA_DIR/mkcert-ca.pem"
+    echo "Certificate copied to shared CA directory"
+fi
+
 echo "Self-signed certificate created and copied."
 
 
@@ -109,6 +155,15 @@ roleRef:
 EOF
     TOKEN=$(kubectl create token integr8scode-sa -n default --duration=24h)
     K8S_SERVER=$(kubectl config view --raw -o jsonpath='{.clusters[0].cluster.server}')
+    # When running in Docker, need to use appropriate host IP
+    if [ -f /.dockerenv ]; then
+        DOCKER_HOST_IP=$(detect_docker_host_ip)
+        K8S_SERVER=$(echo "$K8S_SERVER" | sed "s|https://[^:]*:|https://${DOCKER_HOST_IP}:|")
+        echo "Running in Docker, using ${DOCKER_HOST_IP} for k3s server"
+    else
+        # Otherwise use localhost
+        K8S_SERVER=$(echo "$K8S_SERVER" | sed 's|https://[^:]*:|https://127.0.0.1:|')
+    fi
     cat > /backend/kubeconfig.yaml <<EOF
 apiVersion: v1
 kind: Config

files_for_readme/logo.png

@@ -0,0 +1,52 @@
+server {
+    listen 5001;
+    server_name _;
+
+    root /usr/share/nginx/html;
+    index index.html;
+
+    # Enable gzip compression
+    gzip on;
+    gzip_vary on;
+    gzip_min_length 1024;
+    gzip_types text/plain text/css text/xml text/javascript application/javascript application/xml+rss application/json application/x-font-ttf font/opentype image/svg+xml image/x-icon;
+    gzip_disable "msie6";
+
+    location /api/ {
+        proxy_pass https://backend:443;
+        proxy_ssl_verify off;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
+    # Cache static assets
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {
+        expires 1y;
+        add_header Cache-Control "public, immutable";
+        add_header X-Content-Type-Options "nosniff";
+    }
+
+    # Cache build directory assets with long expiry
+    location /build/ {
+        expires 1y;
+        add_header Cache-Control "public, max-age=31536000, immutable";
+        add_header X-Content-Type-Options "nosniff";
+    }
+
+    # HTML files should not be cached
+    location ~* \.html$ {
+        expires -1;
+        add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0";
+    }
+
+    location / {
+        add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';";
+        add_header X-Frame-Options "SAMEORIGIN";
+        add_header X-Content-Type-Options "nosniff";
+        add_header Referrer-Policy "strict-origin-when-cross-origin";
+        add_header Permissions-Policy "geolocation=(), microphone=(), camera=()";
+        try_files $uri $uri/ /index.html;
+    }
+}

frontend/nginx.conf

@@ -5,14 +5,44 @@
     <meta name='viewport' content='width=device-width,initial-scale=1'>
 
     <title>Integr8sCode</title>
+    <meta name="description" content="Integr8sCode - Write, compile, and manage code directly in your browser with our powerful online development environment">
 
     <link rel='icon' type='image/png' href='/favicon.png'>
-    <link rel='stylesheet' href='/global.css'>
-    <link rel='stylesheet' href='/build/bundle.css'>
 
+    <style>
+        body { margin: 0; font-family: system-ui, -apple-system, sans-serif; }
+        .app-container { max-width: 1280px; margin: 0 auto; padding: 0 1rem; }
+        header { position: fixed; top: 0; left: 0; right: 0; z-index: 50; }
+        main { padding-top: 6rem; }
+        /* Prevent layout shift */
+        img { max-width: 100%; height: auto; }
+        @media (prefers-color-scheme: dark) {
+            body { background-color: #0f172a; color: #e2e8f0; }
+        }
+    </style>
+
+    <link rel="preload" href="/build/bundle.css" as="style">
+    <link rel="stylesheet" href="/build/bundle.css" media="print" onload="this.media='all'; this.onload=null;">
+    <noscript><link rel="stylesheet" href="/build/bundle.css"></noscript>
     <script type="module" src='/build/main.js'></script>
 </head>
 
 <body>
+    <div id="app-loading" style="min-height: 100vh; display: flex; align-items: center; justify-content: center;">
+        <div style="text-align: center;">
+            <div style="width: 40px; height: 40px; border: 3px solid #f3f4f6; border-top-color: #3b82f6; border-radius: 50%; animation: spin 1s linear infinite; margin: 0 auto;"></div>
+            <style>
+                @keyframes spin { to { transform: rotate(360deg); } }
+            </style>
+        </div>
+    </div>
+    <script>
+        window.addEventListener('DOMContentLoaded', () => {
+            setTimeout(() => {
+                const loader = document.getElementById('app-loading');
+                if (loader) loader.style.display = 'none';
+            }, 100);
+        });
+    </script>
 </body>
 </html>

frontend/public/favicon.png

@@ -0,0 +1,16 @@
+User-agent: *
+Allow: /$
+Allow: /editor$
+Allow: /login$
+Allow: /register$
+Disallow: /api/
+Disallow: /build/
+Disallow: /*.js$
+Disallow: /*.css$
+Disallow: /*.map$
+Disallow: /certs/
+Disallow: /node_modules/
+Disallow: /src/
+Disallow: /scripts/
+
+Sitemap: https://app.integr8scode.cc/sitemap.xml