feat: vendor Plus Jakarta Sans fonts and patch layouts to resolve build-time network constraints, update health-server proxy logic, and correct UptimeRobot interval units.

Dockerfile

@@ -58,6 +58,24 @@ ENV SENTRY_DSN="" \
 # Changing patches won't bust the pnpm install cache layer.
 RUN pnpm install --frozen-lockfile=false
 
+# Vendor Plus Jakarta Sans — HF Space cannot reach fonts.gstatic.com.
+# Postiz upstream imports `Plus_Jakarta_Sans` from `next/font/google` in two
+# layout files, which forces a build-time fetch from gstatic. HF egress to
+# gstatic is blocked/throttled, so `next build` retry-loops indefinitely.
+# We ship 4 woff2 variants in the image and rewrite both layouts to use
+# `next/font/local` (zero network at build).
+COPY vendor/fonts/PlusJakartaSans-500-normal.woff2 \
+     vendor/fonts/PlusJakartaSans-500-italic.woff2 \
+     vendor/fonts/PlusJakartaSans-600-normal.woff2 \
+     vendor/fonts/PlusJakartaSans-600-italic.woff2 \
+     apps/frontend/src/fonts/
+COPY vendor/patch-jakarta-font.js /tmp/patch-jakarta-font.js
+RUN node /tmp/patch-jakarta-font.js \
+    && grep -q "next/font/local" "apps/frontend/src/app/(app)/layout.tsx" \
+    && grep -q "next/font/local" "apps/frontend/src/app/(extension)/layout.tsx" \
+    && ! grep -rq "next/font/google" apps/frontend/src/app/ \
+    || (echo "JAKARTA PATCH FAILED — layout.tsx shape changed upstream"; exit 1)
+
 # Patch Next.js config (after install — see above).
 #   1. basePath/assetPrefix=/app   → Postiz UI at /app; HuggingPost dashboard owns /
 #   2. productionBrowserSourceMaps: false  → smaller build output

health-server.js

@@ -6,7 +6,7 @@
 // Routing rules (in order):
 //   /health, /status, /uptimerobot/setup → handled here
 //   / (exact)                            → HuggingPost dashboard HTML
-//   /app or /app/*                       → Postiz (nginx :5000), /app prefix stripped
+//   /app, /app/ or /app/*               → Postiz (nginx :5000), /app prefix stripped
 //   /_next/* or /static/*                → 301 redirect to /app/<same path>
 //                                          (catches asset URLs Next.js may emit
 //                                           without basePath in edge cases)
@@ -569,19 +569,10 @@ const server = http.createServer((req, res) => {
     return;
   }
 
-  // ── /app (exact root) → redirect to /app/auth/ ───────────────────────────
-  // nginx:5000's location / proxies to Next.js as GET /app/ but Next.js
-  // returns an empty 200 for the bare root — middleware redirect never fires.
-  // Short-circuit at this layer: send the browser straight to /app/auth/;
-  // Next.js middleware will redirect to /app/launches/ if already logged in.
-  if (pathname === "/app" || pathname === "/app/") {
-    res.writeHead(302, { Location: "/app/auth/" });
-    res.end();
-    return;
-  }
-
-  // ── /app/* → serve public static files from disk, proxy the rest ────────
-  if (pathname.startsWith("/app/")) {
+  // ── /app, /app/ and /app/* → proxy to nginx (Next.js handles routing) ────
+  // Do NOT short-circuit /app/ to /app/auth/ here — Next.js middleware does
+  // the right thing: auth cookie present → /launches, absent → /auth/.
+  if (pathname === "/app" || pathname.startsWith("/app/")) {
     const stripped = pathname.slice("/app".length) || "/";
     const query = parsedUrl.search || "";
 

setup-uptimerobot.sh

@@ -10,7 +10,7 @@ set -euo pipefail
 # Optional:
 # - UPTIMEROBOT_MONITOR_NAME: friendly name for the monitor
 # - UPTIMEROBOT_ALERT_CONTACTS: dash-separated alert contact IDs, e.g. "123456-789012"
-# - UPTIMEROBOT_INTERVAL: monitoring interval in minutes (subject to account limits)
+# - UPTIMEROBOT_INTERVAL: monitoring interval in seconds (default: 300 = 5 min; min: 30)
 
 API_URL="https://api.uptimerobot.com/v2"
 API_KEY="${UPTIMEROBOT_API_KEY:-}"
@@ -36,7 +36,7 @@ SPACE_HOST_CLEAN="${SPACE_HOST_CLEAN%%/*}"
 
 MONITOR_URL="https://${SPACE_HOST_CLEAN}/health"
 MONITOR_NAME="${UPTIMEROBOT_MONITOR_NAME:-HuggingPost ${SPACE_HOST_CLEAN}}"
-INTERVAL="${UPTIMEROBOT_INTERVAL:-5}"
+INTERVAL="${UPTIMEROBOT_INTERVAL:-300}"
 
 echo "Checking existing UptimeRobot monitors for ${MONITOR_URL}..."
 MONITORS_RESPONSE=$(curl -sS -X POST "${API_URL}/getMonitors" \

start.sh

@@ -69,6 +69,7 @@ export PGPASSWORD="${DB_PASSWORD}"
 export DATABASE_URL="${DATABASE_URL:-postgresql://postiz:${DB_PASSWORD}@localhost:5432/postiz}"
 export REDIS_URL="${REDIS_URL:-redis://localhost:6379}"
 export FRONTEND_URL="${FRONTEND_URL:-${PUBLIC_URL}}"
+export MAIN_URL="${MAIN_URL:-${PUBLIC_URL}}"
 export NEXT_PUBLIC_BACKEND_URL="${NEXT_PUBLIC_BACKEND_URL:-${PUBLIC_URL}/app/api}"
 export BACKEND_INTERNAL_URL="${BACKEND_INTERNAL_URL:-http://localhost:3000}"
 export STORAGE_PROVIDER="${STORAGE_PROVIDER:-local}"

vendor/patch-jakarta-font.js

@@ -0,0 +1,29 @@
+const fs = require('fs');
+
+const files = [
+  'apps/frontend/src/app/(app)/layout.tsx',
+  'apps/frontend/src/app/(extension)/layout.tsx',
+];
+
+const importOld = "import { Plus_Jakarta_Sans } from 'next/font/google';";
+const importNew = "import localFont from 'next/font/local';";
+const callRegex = /const jakartaSans = Plus_Jakarta_Sans\(\{[\s\S]*?\}\);/;
+const callNew = `const jakartaSans = localFont({
+  src: [
+    { path: '../../fonts/PlusJakartaSans-500-normal.woff2', weight: '500', style: 'normal' },
+    { path: '../../fonts/PlusJakartaSans-500-italic.woff2', weight: '500', style: 'italic' },
+    { path: '../../fonts/PlusJakartaSans-600-normal.woff2', weight: '600', style: 'normal' },
+    { path: '../../fonts/PlusJakartaSans-600-italic.woff2', weight: '600', style: 'italic' },
+  ],
+  display: 'swap',
+});`;
+
+for (const f of files) {
+  const src = fs.readFileSync(f, 'utf8');
+  if (!src.includes(importOld) || !callRegex.test(src)) {
+    console.error(`PATCH FAIL: ${f} — Plus_Jakarta_Sans pattern not found`);
+    process.exit(1);
+  }
+  fs.writeFileSync(f, src.replace(importOld, importNew).replace(callRegex, callNew));
+  console.log(`patched ${f}`);
+}