feat: finish demo — port demo-monolith cleanup, separate UI and API containers

Frontend
- Bring spring-angular-ui back under version control with the Angular 22 +
  Material UI from demo-monolith; stop committing the built static/ folder
- Serve the UI from nginx, which proxies /api to the backend so the JWT
  cookie works on a single origin, and falls back to index.html for routes

Backend
- Add PUT /api/users/{id}/roles (admin only) that keeps at least one admin
  and does not let an admin drop their own admin role
- Tighten security: read tutorials publicly, change them only when logged
  in, users/roles API for admins only; hide password hashes in JSON
- Remove unused Settings and Test endpoints, DTO mappers, commented code
- Flyway V2 aligns the schema with the entities; Hibernate now runs with
  ddl-auto: validate
- JWT lifetime matches the 24h cookie; fix the cookie name typo
- Keep CORS only for calling the API directly (ng serve without proxy)

Docker
- Backend Dockerfile: Gradle build + JRE runtime with layer caching,
  non-root user and healthcheck; add .dockerignore
- UI Dockerfile: Node 24 build + nginx with healthcheck
- docker-compose runs its own Postgres, starts services in health order
  and always rebuilds images

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
2026-10-17 19:33:38 +02:00
co-authored by Claude Opus 5.5
parent 1d38a95f48
commit 514e1fd0c7
118 changed files with 9134 additions and 79218 deletions
@@ -1,65 +1,61 @@
<div>
<div *ngIf="currentTutorial.id" class="edit-form">
<h4>Tutorial</h4>
<form>
<div class="form-group">
<label for="title">Title</label>
<input
type="text"
class="form-control"
id="title"
[(ngModel)]="currentTutorial.title"
name="title"
/>
</div>
<div class="form-group">
<label for="description">Description</label>
<input
type="text"
class="form-control"
id="description"
[(ngModel)]="currentTutorial.description"
name="description"
/>
</div>
<div class="form-group">
<label><strong>Status:</strong></label>
{{ currentTutorial.published ? "Published" : "Pending" }}
</div>
</form>
<button
class="badge badge-primary mr-2"
*ngIf="currentTutorial.published"
(click)="updatePublished(false)"
>
UnPublish
</button>
<button
*ngIf="!currentTutorial.published"
class="badge badge-primary mr-2"
(click)="updatePublished(true)"
>
Publish
</button>
<button class="badge badge-danger mr-2" (click)="deleteTutorial()">
Delete
</button>
<button
type="submit"
class="badge badge-success mb-2"
(click)="updateTutorial()"
>
Update
</button>
<p>{{ message }}</p>
<div class="page narrow">
<div class="page-header">
<h1 class="page-title">Edit tutorial</h1>
<a mat-button routerLink="/tutorials">
<mat-icon>arrow_back</mat-icon>
Back to list
</a>
</div>
<div *ngIf="!currentTutorial.id">
<br />
<p>Cannot access this Tutorial...</p>
</div>
</div>
@if (currentTutorial.id) {
<mat-card appearance="outlined">
<form #tutorialForm="ngForm" (ngSubmit)="updateTutorial()">
<mat-card-header>
<mat-card-subtitle>
<span class="status" [class.published]="currentTutorial.published">
{{ currentTutorial.published ? 'Published' : 'Pending' }}
</span>
</mat-card-subtitle>
</mat-card-header>
<mat-card-content>
<mat-form-field appearance="outline" class="full-width">
<mat-label>Title</mat-label>
<input matInput name="title" required maxlength="255" [(ngModel)]="currentTutorial.title" />
<mat-error>Title is required</mat-error>
</mat-form-field>
<mat-form-field appearance="outline" class="full-width">
<mat-label>Description</mat-label>
<textarea matInput name="description" rows="4" maxlength="255" #description
[(ngModel)]="currentTutorial.description"></textarea>
<mat-hint align="end">{{ description.value.length }} / 255</mat-hint>
</mat-form-field>
</mat-card-content>
<mat-card-actions class="actions">
<button mat-button type="button" class="danger" (click)="deleteTutorial()">
<mat-icon>delete</mat-icon>
Delete
</button>
<span class="spacer"></span>
<button mat-stroked-button type="button" (click)="updatePublished(!currentTutorial.published)">
<mat-icon>{{ currentTutorial.published ? 'unpublished' : 'publish' }}</mat-icon>
{{ currentTutorial.published ? 'Unpublish' : 'Publish' }}
</button>
<button mat-flat-button type="submit" [disabled]="tutorialForm.invalid">
<mat-icon>save</mat-icon>
Save
</button>
</mat-card-actions>
</form>
</mat-card>
} @else if (notFound) {
<mat-card appearance="outlined">
<div class="empty">
<mat-icon>search_off</mat-icon>
<p>This tutorial could not be loaded</p>
</div>
</mat-card>
}
</div>