Notes

[Axedyson]

General Notes

• In the future we want to organize by feature rather than by type
• More extensive Docker and Docker Compose configuration to provide easier setup and development e.g. vscode development containers
• standard-version/semantic-release/changeset/keepachangelog?
• Sentry?
• Datadog?
• DNSSEC on namecheap?
• terraform security?
• We should probably be more granular when it comes to exclusion of certain files from typescript build compilation output e.g. the file DatabaseSeeder.ts?

Web Notes

• Probably always make use of the common internationalization set of translations because it contains the unknown error message which in theory could appear on any page
• Whenever the playwright npm package has been updated in your local cloned version of the repo, it's probably a good idea to run the following command: yarn playwright install --with-deps in the ./packages/web/ directory locally just in case
• For people who like docker there is this image that contains a playwright installation and its browser dependencies, not sure how to make it work with this project though
• Implement SEO optimizations later
• Implement OG meta tags later
• Implement a page that showcases all of the open source libraries used in the project just like how discord does it
• Soon chromatic will be able to run accessibility tests automatically without us having to use the test runner explicitly, we'll wait for the update to arrive
• Internationalize screen reader text. An example of screen reader text is located in the toast component
• A script to find orphaned translation keys
• Another script to synchronize i18n translations files
• We should probably cache playwright deps to speed things up

Server Notes

• When the digitalocean droplet has been deployed or redeployed make sure to run dokku letsencrypt:enable server && dokku letsencrypt:cron-job --add inside the droplet to enable https and the cron job for automatic renewal of the certificate
• Maybe configure the digitalocean dokku droplet like the way it's configured here
• Maybe use this for terraform remote connection: https://www.terraform.io/language/resources/provisioners/connection#connecting-through-a-bastion-host-with-ssh
• Right now maybe a deployment collison could occur in CI when two commits are pushed to the main branch at or about the same time. To fix this issue we could do something along these lines: https://dokku.com/docs/deployment/application-management/#unlocking-app-deploys
• We can only add SSL to the same domain 5 times a week, meaning that only the first 5 times a droplet has been redeployed during a week will have SSL enabled.
• Maybe use this to build the docker image: https://github.com/Dcard/yarn-plugins/tree/master/packages/docker-build
• Maybe use this to optimize the docker image even further: https://github.com/docker-slim/docker-slim
• Optimize the docker image size even further e.g. by removing *.d.ts files from the dist folder after mikro-orm cache generation
• Maybe use yarn v2 (yarn berry) instead of the default yarn v1 in the dockerfile: https://github.com/nodejs/docker-node/blob/main/docs/BestPractices.md#upgradingdowngrading-yarn especially because of this
• docker linting?
• Maybe use CMD [ "node", "dist/index.js" ] instead of yarn: https://github.com/nodejs/docker-node/blob/main/docs/BestPractices.md#cmd
• Create an ER-model of the database and make sure it's normalized properly

Droplet Security

• Configure the droplet properly
• https://github.com/digitalocean/droplet-1-clicks/blob/master/dokku-20-04/template.json#L73-L74
• https://github.com/digitalocean/droplet-1-clicks/blob/master/dokku-20-04/files/etc/update-motd.d/99-one-click#L10-L12
• Maybe switch from DigitalOcean to Vultr as they're a tiny bit cheaper?