Add multi-user authentication system with database persistence

✨ Features:
- 🔐 Hybrid authentication (admin from .env + multi-user support)
- 💾 Database persistence for all user data (GitLab tokens, settings)
- 🔑 Session-based auth with HTTP-only cookies (7 days expiry)
- 🔒 Bcrypt password hashing with secure session management
- 👤 Per-user GitLab configuration and preferences
- 🌱 Auto-create admin user on first run via seed script
- 🔐 Secure password generator script for .env files

📦 Changes:
- Added User & Session models to Prisma schema
- Created auth utilities (bcrypt, session management)
- Built login/logout/session API routes
- Added login page UI with modern design
- Implemented middleware for route protection
- Updated config API to be user-specific
- Created password generator script (scripts/generate-env.sh)
- Removed docker-entrypoint.sh, moved logic to docker-compose
- Updated Sidebar to show user info and logout button
- Enhanced security with SESSION_SECRET and HTTP-only cookies

🧪 Tests:
- ✅ All ESLint checks passed
- ✅ TypeScript compilation successful
- ✅ Next.js build completed
- ✅ Docker build verified

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Author: ismoilovdevml

.env.example

@@ -1,31 +1,35 @@
-# =============================================================================
-# GitLab CI/CD Dashboard - Environment Configuration Template
-# =============================================================================
-# Copy this file to .env and update with your values
-# For production: Use strong, unique passwords
-# =============================================================================
+# ==========================================
+# Database Configuration
+# ==========================================
+POSTGRES_USER=gitlab_dashboard
+POSTGRES_PASSWORD=CHANGE_ME_STRONG_PASSWORD_HERE
+POSTGRES_DB=gitlab_dashboard
+POSTGRES_HOST=localhost
+POSTGRES_PORT=5432
+DATABASE_URL=postgresql://gitlab_dashboard:CHANGE_ME_STRONG_PASSWORD_HERE@localhost:5432/gitlab_dashboard?schema=public
 
-# -----------------------------------------------------------------------------
-# Database Configuration (PostgreSQL 17)
-# -----------------------------------------------------------------------------
-POSTGRES_USER="gitlab_dashboard"
-POSTGRES_PASSWORD="your_secure_postgres_password_here"
-POSTGRES_DB="gitlab_dashboard"
-POSTGRES_HOST="localhost"
-POSTGRES_PORT="5432"
-DATABASE_URL="postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@${POSTGRES_HOST}:${POSTGRES_PORT}/${POSTGRES_DB}?schema=public"
+# ==========================================
+# Redis Configuration
+# ==========================================
+REDIS_PASSWORD=CHANGE_ME_REDIS_PASSWORD_HERE
+REDIS_HOST=localhost
+REDIS_PORT=6379
+REDIS_URL=redis://:CHANGE_ME_REDIS_PASSWORD_HERE@localhost:6379
 
-# -----------------------------------------------------------------------------
-# Redis Configuration (Latest)
-# -----------------------------------------------------------------------------
-REDIS_PASSWORD="your_secure_redis_password_here"
-REDIS_HOST="localhost"
-REDIS_PORT="6379"
-REDIS_URL="redis://:${REDIS_PASSWORD}@${REDIS_HOST}:${REDIS_PORT}"
+# ==========================================
+# App Configuration
+# ==========================================
+NODE_ENV=production
+NEXT_PUBLIC_APP_URL=http://localhost:3000
 
-# -----------------------------------------------------------------------------
-# Application Configuration
-# -----------------------------------------------------------------------------
-NODE_ENV="production"
-NEXT_PUBLIC_APP_URL="http://localhost:3000"
+# ==========================================
+# Admin User (Auto-created on first run)
+# ==========================================
+ADMIN_USERNAME=admin
+ADMIN_PASSWORD=CHANGE_ME_ADMIN_PASSWORD
+ADMIN_EMAIL=[email protected]
 
+# ==========================================
+# Security
+# ==========================================
+SESSION_SECRET=CHANGE_ME_RANDOM_SECRET_KEY_HERE

Dockerfile

@@ -46,7 +46,7 @@ RUN chown nextjs:nodejs .next
 COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
 COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
 
-# Copy Prisma files
+# Copy Prisma files (needed for migrations and seeding)
 COPY --from=builder --chown=nextjs:nodejs /app/node_modules/.prisma ./node_modules/.prisma
 COPY --from=builder --chown=nextjs:nodejs /app/node_modules/@prisma ./node_modules/@prisma
 COPY --from=builder --chown=nextjs:nodejs /app/prisma ./prisma
@@ -58,4 +58,5 @@ EXPOSE 3000
 ENV PORT=3000
 ENV HOSTNAME="0.0.0.0"
 
+# Default command (can be overridden by docker-compose)
 CMD ["node", "server.js"]

README.md

@@ -14,18 +14,6 @@ Modern, real-time dashboard for monitoring and managing GitLab CI/CD pipelines w
 - 🌓 **Dark & Light Themes** - Comfortable viewing in any environment
 - 📱 **Responsive Design** - Works on desktop, tablet, and mobile
 
-### Alerting System ⚡
-- 🎯 **Instant Webhook Alerts** - GitLab webhooks for real-time notifications (0-2 seconds)
-- 📢 **Multi-Channel Support** - Telegram, Slack, Discord, Email, Custom Webhooks
-- 🎛️ **Flexible Alert Rules** - Configure alerts per project or globally
-- 📊 **Alert History** - Track all sent notifications
-- 🔔 **Smart Filtering** - Alert only on specific events (success, failed, running, canceled)
-
-### Infrastructure
-- 🗄️ **PostgreSQL Database** - Persistent storage for configurations and history
-- ⚡ **Redis Cache** - Fast data access and reduced API calls
-- 🐳 **Docker Compose** - One-command deployment with all services
-
 ## 🚀 Quick Start
 
 ### Using Docker Compose (Recommended)
@@ -46,8 +34,8 @@ Open `http://localhost:3000` in your browser.
 
 **Services:**
 - Dashboard UI: `http://localhost:3000`
-- PostgreSQL: `localhost:5432`
-- Redis: `localhost:6379`
+- PostgreSQL: `localhost:5432` (exposed for development)
+- Redis: `localhost:6379` (exposed for development)
 
 ### Stop Services
 
@@ -75,53 +63,7 @@ docker-compose down -v
 - Create token with `api` scope
 - Copy and paste in dashboard
 
-### 2. Setup Webhook Alerts (Instant Notifications)
-
-1. Go to **Alerting** tab → **Webhook Setup ⚡**
-2. Copy the webhook URL: `http://localhost:3000/api/webhook/gitlab`
-3. **For local development**, expose your localhost using:
-   ```bash
-   # Option 1: ngrok
-   ngrok http 3000
-   # You'll get: https://abc123.ngrok.io
-
-   # Option 2: Cloudflare Tunnel
-   cloudflared tunnel --url http://localhost:3000
-   ```
-4. Add webhook in GitLab:
-   - Project → Settings → Webhooks
-   - URL: `https://your-tunnel-url.ngrok.io/api/webhook/gitlab`
-   - Trigger: ✅ Pipeline events
-   - Click "Add webhook"
-
-### 3. Configure Alert Channels
-
-1. Go to **Alerting** tab → **Channels** tab
-2. Enable and configure your preferred channel:
-
-**Telegram Setup:**
-```bash
-# 1. Create bot with @BotFather
-# 2. Get bot token: 123456:ABC-DEF1234ghIkl-zyx57W2v1u123ew11
-# 3. Get chat ID (send message to bot, then check):
-curl https://api.telegram.org/bot<YOUR_BOT_TOKEN>/getUpdates
-```
-
-3. Add bot token and chat ID in dashboard
-4. Click "Test Connection" to verify
-
-### 4. Create Alert Rules
-
-1. Go to **Alerting** tab → **Alert Rules** tab
-2. Click "Add Alert Rule"
-3. Configure:
-   - **Name**: Custom rule name
-   - **Project**: Select project or "All Projects"
-   - **Events**: Choose when to alert (Success, Failed, Running, Canceled)
-   - **Channels**: Select notification channels (Telegram, Slack, etc)
-4. Enable the rule
 
-**Done!** You'll now receive instant alerts when pipelines change status ⚡
 
 ## 🏗️ Tech Stack
 
@@ -140,12 +82,6 @@ curl https://api.telegram.org/bot<YOUR_BOT_TOKEN>/getUpdates
 - **ORM**: Prisma
 - **API**: Next.js API Routes
 
-### DevOps
-- **Containerization**: Docker + Docker Compose
-- **CI/CD**: GitHub Actions
-- **Registry**: Docker Hub
-- **Multi-arch**: AMD64 + ARM64
-
 ## 🛠️ Development
 
 ### Local Development
@@ -204,8 +140,4 @@ docker-compose up -d
 ```
 
 
-If you have any questions or issues, please open an issue on GitHub.
-
----
-
-**Built with ❤️ using Next.js & TypeScript**
+If you have any questions or issues, please open an issue on GitHub.

docker-compose.local.yml

@@ -6,14 +6,17 @@ services:
     restart: unless-stopped
     environment:
       POSTGRES_USER: ${POSTGRES_USER:-gitlab_dashboard}
-      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-gitlab_dashboard_2024}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
       POSTGRES_DB: ${POSTGRES_DB:-gitlab_dashboard}
     volumes:
       - postgres_data:/var/lib/postgresql/data
-    ports:
-      - "5432:5432"
+    # Development: expose port to host for debugging
+    # ports:
+    #   - "127.0.0.1:5432:5432"
+    expose:
+      - "5432"
     healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U gitlab_dashboard"]
+      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-gitlab_dashboard}"]
       interval: 10s
       timeout: 5s
       retries: 5
@@ -25,13 +28,16 @@ services:
     image: redis:alpine
     container_name: gitlab-dashboard-redis
     restart: unless-stopped
-    command: redis-server --appendonly yes --requirepass ${REDIS_PASSWORD:-redis_2024}
+    command: redis-server --appendonly yes --requirepass ${REDIS_PASSWORD}
     volumes:
       - redis_data:/data
-    ports:
-      - "6379:6379"
+    # Development: expose port to host for debugging
+    # ports:
+    #   - "127.0.0.1:6379:6379"
+    expose:
+      - "6379"
     healthcheck:
-      test: ["CMD", "redis-cli", "--raw", "incr", "ping"]
+      test: ["CMD", "redis-cli", "--raw", "-a", "${REDIS_PASSWORD}", "ping"]
       interval: 10s
       timeout: 5s
       retries: 5
@@ -52,22 +58,40 @@ services:
         condition: service_healthy
     environment:
       # Database
-      DATABASE_URL: postgresql://${POSTGRES_USER:-gitlab_dashboard}:${POSTGRES_PASSWORD:-gitlab_dashboard_2024}@postgres:5432/${POSTGRES_DB:-gitlab_dashboard}?schema=public
+      DATABASE_URL: postgresql://${POSTGRES_USER:-gitlab_dashboard}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB:-gitlab_dashboard}?schema=public
 
       # Redis
-      REDIS_URL: redis://:${REDIS_PASSWORD:-redis_2024}@redis:6379
+      REDIS_URL: redis://:${REDIS_PASSWORD}@redis:6379
 
       # App Config
       NODE_ENV: production
-      NEXT_PUBLIC_APP_URL: http://localhost:3000
+      NEXT_PUBLIC_APP_URL: ${NEXT_PUBLIC_APP_URL:-http://localhost:3000}
       NEXT_PUBLIC_GITLAB_URL: ${NEXT_PUBLIC_GITLAB_URL:-https://gitlab.com}
+
+      # Admin User (Auto-created on first run)
+      ADMIN_USERNAME: ${ADMIN_USERNAME:-admin}
+      ADMIN_PASSWORD: ${ADMIN_PASSWORD}
+      ADMIN_EMAIL: ${ADMIN_EMAIL:[email protected]}
+
+      # Security
+      SESSION_SECRET: ${SESSION_SECRET}
     ports:
       - "3000:3000"
     networks:
       - gitlab-dashboard-network
-    volumes:
-      # Mount for environment config
-      - ./.env.local:/app/.env.local:ro
+    # Run migrations and seed before starting app
+    command: >
+      sh -c "
+        echo '🔍 Waiting for database...' &&
+        while ! nc -z postgres 5432; do sleep 1; done &&
+        echo '✅ Database ready!' &&
+        echo '🔄 Running migrations...' &&
+        npx prisma db push --skip-generate &&
+        echo '🌱 Creating admin user...' &&
+        npx tsx prisma/seed.ts || echo '⚠️  Admin already exists or seed failed' &&
+        echo '🚀 Starting app...' &&
+        node server.js
+      "
 
 volumes:
   postgres_data:

docker-compose.yml

@@ -8,14 +8,18 @@ services:
     restart: unless-stopped
     environment:
       POSTGRES_USER: ${POSTGRES_USER:-gitlab_dashboard}
-      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-gitlab_dashboard_2024}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
       POSTGRES_DB: ${POSTGRES_DB:-gitlab_dashboard}
     volumes:
       - postgres_data:/var/lib/postgresql/data
-    ports:
-      - "5432:5432"
+    # SECURITY: Only expose to internal network, not to host
+    # For external access (development), uncomment:
+    # ports:
+    #   - "127.0.0.1:5432:5432"
+    expose:
+      - "5432"
     healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U gitlab_dashboard"]
+      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-gitlab_dashboard}"]
       interval: 10s
       timeout: 5s
       retries: 5
@@ -27,13 +31,17 @@ services:
     image: redis:alpine
     container_name: gitlab-dashboard-redis
     restart: unless-stopped
-    command: redis-server --appendonly yes --requirepass ${REDIS_PASSWORD:-redis_2024}
+    command: redis-server --appendonly yes --requirepass ${REDIS_PASSWORD}
     volumes:
       - redis_data:/data
-    ports:
-      - "6379:6379"
+    # SECURITY: Only expose to internal network, not to host
+    # For external access (development), uncomment:
+    # ports:
+    #   - "127.0.0.1:6379:6379"
+    expose:
+      - "6379"
     healthcheck:
-      test: ["CMD", "redis-cli", "--raw", "incr", "ping"]
+      test: ["CMD", "redis-cli", "--raw", "-a", "${REDIS_PASSWORD}", "ping"]
       interval: 10s
       timeout: 5s
       retries: 5
@@ -54,22 +62,40 @@ services:
         condition: service_healthy
     environment:
       # Database
-      DATABASE_URL: postgresql://${POSTGRES_USER:-gitlab_dashboard}:${POSTGRES_PASSWORD:-gitlab_dashboard_2024}@postgres:5432/${POSTGRES_DB:-gitlab_dashboard}?schema=public
+      DATABASE_URL: postgresql://${POSTGRES_USER:-gitlab_dashboard}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB:-gitlab_dashboard}?schema=public
 
       # Redis
-      REDIS_URL: redis://:${REDIS_PASSWORD:-redis_2024}@redis:6379
+      REDIS_URL: redis://:${REDIS_PASSWORD}@redis:6379
 
       # App Config
       NODE_ENV: production
       NEXT_PUBLIC_APP_URL: http://localhost:3000
       NEXT_PUBLIC_GITLAB_URL: ${NEXT_PUBLIC_GITLAB_URL:-https://gitlab.com}
+
+      # Admin User (Auto-created on first run)
+      ADMIN_USERNAME: ${ADMIN_USERNAME:-admin}
+      ADMIN_PASSWORD: ${ADMIN_PASSWORD}
+      ADMIN_EMAIL: ${ADMIN_EMAIL:[email protected]}
+
+      # Security
+      SESSION_SECRET: ${SESSION_SECRET}
     ports:
       - "3000:3000"
     networks:
       - gitlab-dashboard-network
-    volumes:
-      # Mount for hot reload in development (optional)
-      - ./.env.local:/app/.env.local:ro
+    # Run migrations and seed before starting app
+    command: >
+      sh -c "
+        echo '🔍 Waiting for database...' &&
+        while ! nc -z postgres 5432; do sleep 1; done &&
+        echo '✅ Database ready!' &&
+        echo '🔄 Running migrations...' &&
+        npx prisma db push --skip-generate &&
+        echo '🌱 Creating admin user from .env...' &&
+        npx tsx prisma/seed.ts || echo '⚠️  Admin already exists or seed failed' &&
+        echo '🚀 Starting app...' &&
+        node server.js
+      "
 
 volumes:
   postgres_data: