chore: migrate genesis backend into repository

move frontend files to src
fix urls in index.html

Author: simonwep

.env.example

@@ -1,4 +1,7 @@
-# Frontend configuration for during development
+# ===============================================
+# Frontend configuration 
+# ===============================================
+
 # Backend host, usually /api if hosted locally and used via proxy
 # If omitted and OCULAR_HYBRID_MODE is not set to true, authentication will be required to use the app
 OCULAR_GENESIS_HOST=/api
@@ -10,3 +13,59 @@ OCULAR_HYBRID_MODE=
 # Optional, pre-filled login credentials for local testing
 OCULAR_TEST_USERNAME=admin
 OCULAR_TEST_PASSWORD=hgEiPCZP
+
+# ===============================================
+# Backend configuration
+# ===============================================
+
+# Database location
+GENESIS_DB_PATH=.data
+
+# JWT secret known only to your token generator
+GENESIS_JWT_SECRET=84d62c48dd30ca7caf6561252c5bd919
+
+# JWT expiration in minutes
+GENESIS_JWT_TOKEN_EXPIRATION=120000
+
+# If the cookie should be allowed to be sent over http
+# Dangerous, it's best to run it behind a reverse proxy with https
+GENESIS_JWT_COOKIE_ALLOW_HTTP=true
+
+# Gin mode, either test, release or debug
+GENESIS_GIN_MODE=test
+
+# Zap logger, either production or development
+GENESIS_LOG_MODE=development
+
+# Port to listen on
+GENESIS_PORT=8080
+
+# Base url to listen for requests
+GENESIS_BASE_URL=/
+
+# Users to be created on start up.
+# Use ! as suffix for the username to indicate that this user should be created as an admin.
+# Admins can add, remove and edit users.
+GENESIS_CREATE_USERS=admin!:hgEiPCZP
+
+# Allowed username pattern
+GENESIS_USERNAME_PATTERN=^[\w]{0,32}$
+
+# Allowed key pattern
+GENESIS_KEY_PATTERN=^[\w]{0,32}$
+
+# Maximum size of each key in kilobytes
+GENESIS_DATA_MAX_SIZE=512
+
+# Maximum amount of datasets per user
+GENESIS_KEYS_PER_USER=3
+
+# Maximum login attempts before temporary lockout for a user.
+# They reset after a successful login and are not persistent across restarts.
+# Setting it to 0 disables this feature.
+GENESIS_LOGIN_MAX_ATTEMPTS=5
+
+# Durations for temporary lockouts after failed login attempts, capped at the last value.
+# This is reset after a successful login for each individual user.
+# Leaving this empty disables temporary lockouts.
+GENESIS_LOGIN_LOCKOUT_DURATIONS=3s,15s,1m,5m,10m,15m

.env.genesis

@@ -19,7 +19,7 @@ Make sure you have the following installed:
 
 - [Node.js](https://nodejs.org/en/) (LTS version)
 - [pnpm](https://pnpm.io/) (for package management)
-- [Docker](https://www.docker.com/) (leave out if you want to work only on the frontend)
+- [GoLang](https://golang.org/) (leave out if you want to work only on the frontend)
 
 After you've installed the required software, follow these steps:
 

.github/CONTRIBUTING.md

@@ -3,10 +3,10 @@ description: 'Set up the repository with pnpm and Node.js'
 inputs:
   pnpm-version:
     description: 'Version of pnpm to use'
-    default: 10.27.0
+    default: '10.27.0'
   node-version:
     description: 'Version of Node.js to use'
-    default: 24.12.0
+    default: '24.12.0'
 runs:
   using: 'composite'
   steps:
@@ -24,3 +24,12 @@ runs:
     - name: Install dependencies
       shell: bash
       run: pnpm install --frozen-lockfile
+
+    - name: Set up Go
+      uses: actions/setup-go@v6
+      with:
+        go-version-file: genesis/go.mod
+
+    - name: Install dependencies
+      shell: bash
+      run: go -C genesis mod download

.github/workflows/actions/setup-repository/action.yml

@@ -7,7 +7,6 @@ inputs:
   endpoint:
     description: 'The healthcheck endpoint'
     required: true
-    default: 'health'
   expected_code:
     description: 'The expected HTTP status code'
     default: '200'

.github/workflows/actions/wait-for-health-check/action.yml

@@ -1,7 +1,6 @@
 name: Test
 
 on:
-  pull_request:
   push:
     tags-ignore:
       - '**'
@@ -10,11 +9,10 @@ on:
 
 env:
   HUSKY: 0
-  GENESIS_VERSION: v1.6.1
 
 jobs:
   test:
-    name: Run unit, lint and e2e tests
+    name: Run tests
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout repository
@@ -41,22 +39,31 @@ jobs:
           OCULAR_GENESIS_HOST: /api
           OCULAR_HYBRID_MODE: true
 
+      - name: Build genesis
+        run: go -C genesis build -v ./...
+
+      - name: Test genesis
+        run: go -C genesis test -v ./...
+        
+      - name: Prepare .env
+        run: cp .env.example .env
+
       - name: Start genesis and ocular
         run: |
-          docker pull ghcr.io/simonwep/genesis:latest
-          docker run -p 8080:8080 -v "./.data:/app/.data" --env-file .env.genesis ghcr.io/simonwep/genesis:${{ env.GENESIS_VERSION }} start &
-          pnpm vite preview &
+          pnpm dev:backend >genesis.log 2>&1 &
+          pnpm vite preview >ocular.log 2>&1 &
 
       - name: Wait for genesis to be healthy
         uses: ./.github/workflows/actions/wait-for-health-check
         with:
           host: localhost:8080
+          endpoint: health
 
       - name: Wait for ocular to be healthy
         uses: ./.github/workflows/actions/wait-for-health-check
         with:
           host: localhost:3000
-          endpoint: /dashboard
+          endpoint: dashboard
 
       - name: Install playwright browsers
         run: pnpm exec playwright install --with-deps firefox
@@ -71,3 +78,11 @@ jobs:
           name: test-results
           path: test-results/
           retention-days: 7
+
+      - name: Upload service logs
+        uses: actions/upload-artifact@v7
+        if: ${{ failure() }}
+        with:
+          name: service-logs
+          path: "*.log"
+          retention-days: 7

.github/workflows/test.yml

@@ -1,4 +1,18 @@
-FROM ghcr.io/simonwep/genesis:v1.6.1 AS genesis
+FROM --platform=$BUILDPLATFORM golang:1.26-alpine AS genesis
+
+ARG TARGETOS
+ARG TARGETARCH
+
+WORKDIR /app
+COPY genesis/go.mod genesis/go.sum ./genesis/
+
+RUN cd genesis && \
+    go mod download
+
+COPY genesis ./genesis
+
+RUN cd genesis && \
+    GOOS=$TARGETOS GOARCH=$TARGETARCH go build -o genesis
 
 FROM --platform=$BUILDPLATFORM node:24-alpine AS frontend
 
@@ -41,7 +55,7 @@ ENV GENESIS_KEYS_PER_USER='2'
 ENV GENESIS_LOGIN_MAX_ATTEMPTS='5'
 ENV GENESIS_LOGIN_LOCKOUT_DURATIONS='1m,5m,15m,30m,1h'
 
-COPY --from=genesis /app/genesis /usr/local/bin/genesis
+COPY --from=genesis /app/genesis/genesis /usr/local/bin/genesis
 COPY --from=frontend /app/dist /usr/share/caddy
 
 COPY ./docker/Caddyfile /etc/caddy/Caddyfile

docker/Dockerfile

@@ -0,0 +1,13 @@
+GENESIS_DB_PATH=.data
+GENESIS_JWT_SECRET=iD5kvlPDwvrlKZLecoV1lhGN9Em8mDFZ
+GENESIS_JWT_TOKEN_EXPIRATION=120960
+GENESIS_GIN_MODE=test
+GENESIS_LOG_MODE=development
+GENESIS_PORT=8080
+GENESIS_CREATE_USERS=foo:hgEiPCZP,baz:8d7f6g5h,bar!:EczUR8dn
+GENESIS_USERNAME_PATTERN=^[\w]{0,32}$
+GENESIS_KEY_PATTERN=^[\w]{0,32}$
+GENESIS_DATA_MAX_SIZE=1
+GENESIS_KEYS_PER_USER=3
+GENESIS_LOGIN_MAX_ATTEMPTS=5
+GENESIS_LOGIN_LOCKOUT_DURATIONS=2s,5s,10s

genesis/.env.test

@@ -0,0 +1,20 @@
+package commands
+
+import (
+	"github.com/simonwep/genesis/core"
+	"github.com/simonwep/genesis/routes"
+	"github.com/urfave/cli/v2"
+)
+
+func Start(*cli.Context) error {
+	router := routes.SetupRoutes()
+	core.InitializeUsers()
+
+	if err := router.SetTrustedProxies(nil); err != nil {
+		return err
+	} else if err = router.Run("0.0.0.0:" + core.Config.AppPort); err != nil {
+		return err
+	}
+
+	return nil
+}

genesis/commands/app.go

@@ -0,0 +1,67 @@
+package commands
+
+import (
+	"errors"
+	"fmt"
+	"strings"
+
+	"github.com/simonwep/genesis/core"
+	"github.com/urfave/cli/v2"
+)
+
+func ListUsers(_ *cli.Context) error {
+	if users, err := core.GetAllUsers(); err != nil {
+		return err
+	} else {
+
+		// Print users
+		for _, user := range users {
+			fmt.Printf("Name: %v, Admin: %v\n", user.Name, user.Admin)
+		}
+	}
+
+	return nil
+}
+
+func RemoveUser(ctx *cli.Context) error {
+	return core.DeleteUser(ctx.Args().Get(0))
+}
+
+func AddUser(ctx *cli.Context) error {
+	username, password := ctx.Args().Get(0), ctx.Args().Get(1)
+	admin := strings.HasSuffix(username, "!")
+
+	err := core.CreateUser(core.User{
+		Name:     strings.TrimSuffix(username, "!"),
+		Admin:    admin,
+		Password: password,
+	})
+
+	if errors.Is(err, core.ErrUserAlreadyExists) {
+		fmt.Println("User already exists")
+		return nil
+	}
+
+	return err
+}
+
+func UpdateUser(ctx *cli.Context) error {
+	username := ctx.Args().Get(0)
+	newPassword := ctx.String("password")
+
+	if newPassword == "" {
+		fmt.Println("No password provided")
+		return nil
+	}
+
+	err := core.UpdateUser(username, core.PartialUser{
+		Password: &newPassword,
+	})
+
+	if errors.Is(err, core.ErrUserNotFound) {
+		fmt.Println("User not found")
+		return nil
+	}
+
+	return err
+}