Compare commits
13
Commits
d91c03002b
...
master
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
3a0291d450 | ||
|
|
7871f9beb7 | ||
|
|
624a3e4bbd | ||
|
|
cd3262d016 | ||
|
|
5f4e16bbb0 | ||
|
|
1acb669f61 | ||
|
|
ca4d4b5682 | ||
|
|
88d6d9ddef | ||
|
|
ebfe68c132 | ||
|
|
169bbb8bad | ||
|
|
d7733afdad | ||
|
|
b57db5f1ac | ||
|
|
edbc591a04 |
@@ -0,0 +1,3 @@
|
||||
COMPOSE_PROJECT_NAME=nullcart_promo_prod
|
||||
CLEARNET_DOMAIN=nullcart.net
|
||||
ONION_HOSTNAME=samplexxxxxxxxx.onion
|
||||
@@ -0,0 +1,3 @@
|
||||
.env.prod
|
||||
/deploy/certs
|
||||
/deploy/certbot/www
|
||||
@@ -1,3 +1,131 @@
|
||||
# NullCart Promo Website
|
||||
|
||||
Static promo landing page for [NullCart](https://git.nobswebdev.com/nobswebdev/nullcart) — HTML and CSS only, zero JavaScript.
|
||||
Static promo landing page for [NullCart](https://git.nobswebdev.com/nobswebdev/nullcart) - HTML and CSS only, zero JavaScript.
|
||||
|
||||
## Development
|
||||
|
||||
No Docker required locally. Open `index.html` in your browser.
|
||||
|
||||
## Production
|
||||
|
||||
### 1. Requirements
|
||||
|
||||
- Ubuntu 22.04+ or similar Linux with Docker Engine and the Compose plugin — follow [Install Docker Engine on Ubuntu](https://docs.docker.com/engine/install/ubuntu/#install-using-the-repository)
|
||||
- A domain name pointing at your server (A records for apex and `www`)
|
||||
|
||||
### 2. Server setup
|
||||
|
||||
Deploy as **root** on the VPS.
|
||||
|
||||
Verify:
|
||||
|
||||
```bash
|
||||
docker compose version
|
||||
```
|
||||
|
||||
### 3. Clone the repository
|
||||
|
||||
```bash
|
||||
cd /root
|
||||
git clone https://git.nobswebdev.com/nobswebdev/nullcart_promo_website.git nullcart_promo_website
|
||||
cd nullcart_promo_website
|
||||
```
|
||||
|
||||
### 4. Configure environment
|
||||
|
||||
```bash
|
||||
cd /root/nullcart_promo_website
|
||||
cp .env.example .env.prod
|
||||
chmod 600 .env.prod
|
||||
```
|
||||
|
||||
Edit `.env.prod`:
|
||||
|
||||
| Variable | Production value |
|
||||
| ---------------------- | ------------------------------ |
|
||||
| `COMPOSE_PROJECT_NAME` | `nullcart_promo_prod` |
|
||||
| `CLEARNET_DOMAIN` | apex only, e.g. `nullcart.net` |
|
||||
|
||||
### 5. Bootstrap TLS certificates
|
||||
|
||||
Nginx needs certificate files before it can start on port 443. For the **first** deploy, create a temporary self-signed pair (replaced after Let's Encrypt):
|
||||
|
||||
```bash
|
||||
./deploy/scripts/bootstrap-certs.sh
|
||||
```
|
||||
|
||||
After the stack is running, obtain real certificates (step 7).
|
||||
|
||||
### 6. Start the stack
|
||||
|
||||
```bash
|
||||
./deploy/scripts/deploy.sh
|
||||
```
|
||||
|
||||
Check containers:
|
||||
|
||||
```bash
|
||||
docker compose --env-file .env.prod -f docker-compose.prod.yml ps
|
||||
```
|
||||
|
||||
### 7. Issue Let's Encrypt certificates
|
||||
|
||||
Remove the temporary bootstrap certificates under `deploy/certs/live/` (Certbot cannot issue into the layout created by `bootstrap-certs.sh`):
|
||||
|
||||
```bash
|
||||
rm -rf deploy/certs/live/*
|
||||
```
|
||||
|
||||
Request the real certificate (apex + www):
|
||||
|
||||
```bash
|
||||
./deploy/scripts/issue-certs.sh --email you@example.com
|
||||
```
|
||||
|
||||
Reload nginx:
|
||||
|
||||
```bash
|
||||
docker compose --env-file .env.prod -f docker-compose.prod.yml exec nginx nginx -s reload
|
||||
```
|
||||
|
||||
#### Automatic renewal
|
||||
|
||||
Open root's crontab:
|
||||
|
||||
```bash
|
||||
crontab -e
|
||||
```
|
||||
|
||||
Add a weekly job (`/root/nullcart_promo_website` is the standard deploy path):
|
||||
|
||||
```cron
|
||||
0 3 * * 0 /root/nullcart_promo_website/deploy/scripts/renew-certs.sh >> /var/log/nullcart-promo-cert-renew.log 2>&1
|
||||
```
|
||||
|
||||
Save and exit the editor. Optional — run once manually to verify:
|
||||
|
||||
```bash
|
||||
/root/nullcart_promo_website/deploy/scripts/renew-certs.sh
|
||||
```
|
||||
|
||||
### 8. Tor onion address
|
||||
|
||||
```bash
|
||||
./deploy/scripts/show-onion.sh
|
||||
```
|
||||
|
||||
Copy the hostname into `.env.prod` as `ONION_HOSTNAME`, then recreate nginx:
|
||||
|
||||
```bash
|
||||
docker compose --env-file .env.prod -f docker-compose.prod.yml up -d --force-recreate nginx
|
||||
```
|
||||
|
||||
Tor Browser will then show ".onion available" when visitors open the clearnet site over HTTPS.
|
||||
|
||||
### 9. Updates
|
||||
|
||||
```bash
|
||||
./deploy/scripts/update.sh
|
||||
```
|
||||
|
||||
This pulls the latest code and rebuilds the stack (`deploy.sh`).
|
||||
|
||||
Binary file not shown.
|
Before Width: | Height: | Size: 704 KiB After Width: | Height: | Size: 189 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 195 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 62 KiB |
+125
-125
@@ -196,43 +196,57 @@ a:hover {
|
||||
}
|
||||
|
||||
.hero {
|
||||
position: relative;
|
||||
padding-block: clamp(3rem, 8vw, 6rem);
|
||||
overflow: hidden;
|
||||
}
|
||||
|
||||
.hero::before {
|
||||
content: "";
|
||||
position: absolute;
|
||||
inset: 0;
|
||||
background:
|
||||
radial-gradient(
|
||||
ellipse 80% 60% at 50% -20%,
|
||||
rgba(247, 143, 30, 0.18),
|
||||
transparent
|
||||
),
|
||||
radial-gradient(
|
||||
ellipse 50% 40% at 100% 50%,
|
||||
rgba(0, 154, 218, 0.1),
|
||||
transparent
|
||||
);
|
||||
pointer-events: none;
|
||||
}
|
||||
|
||||
.hero__watermark {
|
||||
position: absolute;
|
||||
right: 12%;
|
||||
top: 50%;
|
||||
transform: translateY(-50%);
|
||||
width: min(18rem, 40vw);
|
||||
height: auto;
|
||||
opacity: 0.06;
|
||||
pointer-events: none;
|
||||
.hero__inner {
|
||||
position: relative;
|
||||
display: flex;
|
||||
flex-wrap: nowrap;
|
||||
align-items: center;
|
||||
justify-content: space-between;
|
||||
gap: clamp(1rem, 2vw, 1.5rem);
|
||||
}
|
||||
|
||||
.hero__content {
|
||||
position: relative;
|
||||
max-width: 42rem;
|
||||
flex: 0 1 24rem;
|
||||
min-width: 0;
|
||||
max-width: 28rem;
|
||||
}
|
||||
|
||||
.hero__visual {
|
||||
position: relative;
|
||||
z-index: 1;
|
||||
flex: 0 1 46rem;
|
||||
min-width: 0;
|
||||
width: 100%;
|
||||
max-width: 46rem;
|
||||
height: auto;
|
||||
}
|
||||
|
||||
@media (max-width: 64rem) {
|
||||
.hero__inner {
|
||||
flex-wrap: wrap;
|
||||
width: min(100% - 2rem, var(--max-width));
|
||||
}
|
||||
|
||||
.hero__content {
|
||||
flex: 1 1 100%;
|
||||
max-width: none;
|
||||
}
|
||||
|
||||
.hero__highlights {
|
||||
display: flex;
|
||||
flex-wrap: wrap;
|
||||
gap: 0.5rem 0.75rem;
|
||||
}
|
||||
|
||||
.hero__visual {
|
||||
flex: 1 1 100%;
|
||||
max-width: 30rem;
|
||||
margin-inline: auto;
|
||||
}
|
||||
}
|
||||
|
||||
.hero__badge {
|
||||
@@ -250,28 +264,28 @@ a:hover {
|
||||
}
|
||||
|
||||
.hero h1 {
|
||||
margin: 0 0 1.25rem;
|
||||
font-size: clamp(2rem, 5vw, 3rem);
|
||||
margin: 0 0 1rem;
|
||||
font-size: clamp(2rem, 5vw, 2.85rem);
|
||||
font-weight: 700;
|
||||
line-height: 1.15;
|
||||
letter-spacing: -0.03em;
|
||||
}
|
||||
|
||||
.hero__highlights {
|
||||
display: flex;
|
||||
flex-wrap: wrap;
|
||||
gap: 0.5rem 0.75rem;
|
||||
display: grid;
|
||||
grid-template-columns: repeat(2, minmax(0, 1fr));
|
||||
gap: 0.5rem;
|
||||
margin: 0;
|
||||
padding: 0;
|
||||
list-style: none;
|
||||
}
|
||||
|
||||
.hero__highlights li {
|
||||
padding: 0.375rem 0.75rem;
|
||||
padding: 0.3rem 0.6rem;
|
||||
border: 1px solid var(--border);
|
||||
border-radius: var(--radius);
|
||||
background: var(--surface);
|
||||
font-size: 0.875rem;
|
||||
font-size: 0.8125rem;
|
||||
font-weight: 500;
|
||||
color: var(--text);
|
||||
}
|
||||
@@ -285,18 +299,12 @@ a:hover {
|
||||
}
|
||||
|
||||
.hero__sub {
|
||||
margin: 2rem 0 2rem;
|
||||
font-size: clamp(1rem, 2vw, 1.125rem);
|
||||
margin: 1.25rem 0 1.25rem;
|
||||
font-size: 0.9375rem;
|
||||
color: var(--muted);
|
||||
line-height: 1.7;
|
||||
line-height: 1.6;
|
||||
}
|
||||
|
||||
.hero__actions-row {
|
||||
display: flex;
|
||||
flex-wrap: wrap;
|
||||
align-items: flex-end;
|
||||
gap: 1rem 1.25rem;
|
||||
}
|
||||
|
||||
.link-group {
|
||||
display: flex;
|
||||
@@ -353,50 +361,6 @@ a:hover {
|
||||
margin-bottom: 0;
|
||||
}
|
||||
|
||||
.pillars {
|
||||
display: flex;
|
||||
flex-wrap: wrap;
|
||||
gap: 0.625rem;
|
||||
margin: 0;
|
||||
padding: 0;
|
||||
list-style: none;
|
||||
}
|
||||
|
||||
.privacy-features {
|
||||
display: grid;
|
||||
grid-template-columns: repeat(auto-fill, minmax(11.5rem, 1fr));
|
||||
gap: 0.625rem;
|
||||
}
|
||||
|
||||
.pillar {
|
||||
display: inline-flex;
|
||||
align-items: center;
|
||||
gap: 0.375rem;
|
||||
padding: 0.5rem 0.875rem;
|
||||
border: 1px solid var(--border);
|
||||
border-radius: 999px;
|
||||
background: var(--surface);
|
||||
font-size: 0.8125rem;
|
||||
font-weight: 500;
|
||||
color: var(--text);
|
||||
white-space: nowrap;
|
||||
}
|
||||
|
||||
.pillar__dot {
|
||||
width: 0.375rem;
|
||||
height: 0.375rem;
|
||||
border-radius: 50%;
|
||||
flex-shrink: 0;
|
||||
}
|
||||
|
||||
.pillar:nth-child(odd) .pillar__dot {
|
||||
background: var(--brand);
|
||||
}
|
||||
|
||||
.pillar:nth-child(even) .pillar__dot {
|
||||
background: var(--accent);
|
||||
}
|
||||
|
||||
.features-grid {
|
||||
display: grid;
|
||||
grid-template-columns: repeat(2, 1fr);
|
||||
@@ -418,12 +382,6 @@ a:hover {
|
||||
|
||||
.feature-card--lead {
|
||||
border-color: rgba(247, 143, 30, 0.4);
|
||||
background: linear-gradient(
|
||||
135deg,
|
||||
rgba(247, 143, 30, 0.08),
|
||||
rgba(0, 154, 218, 0.05),
|
||||
var(--surface)
|
||||
);
|
||||
}
|
||||
|
||||
.feature-card__icon {
|
||||
@@ -460,57 +418,46 @@ a:hover {
|
||||
margin-top: 0.375rem;
|
||||
}
|
||||
|
||||
.steps {
|
||||
.tiers {
|
||||
display: grid;
|
||||
grid-template-columns: repeat(3, 1fr);
|
||||
grid-template-columns: repeat(2, 1fr);
|
||||
gap: 1.25rem;
|
||||
margin: 0;
|
||||
padding: 0;
|
||||
list-style: none;
|
||||
counter-reset: step;
|
||||
}
|
||||
|
||||
@media (max-width: 48rem) {
|
||||
.steps {
|
||||
.tiers {
|
||||
grid-template-columns: 1fr;
|
||||
}
|
||||
}
|
||||
|
||||
.step {
|
||||
.tier-card {
|
||||
display: flex;
|
||||
flex-direction: column;
|
||||
align-items: flex-start;
|
||||
padding: 1.5rem;
|
||||
border: 1px solid var(--border);
|
||||
border-radius: var(--radius-lg);
|
||||
background: var(--surface);
|
||||
}
|
||||
|
||||
.step::before {
|
||||
counter-increment: step;
|
||||
content: counter(step);
|
||||
display: flex;
|
||||
align-items: center;
|
||||
justify-content: center;
|
||||
width: 2rem;
|
||||
height: 2rem;
|
||||
margin-bottom: 1rem;
|
||||
border-radius: 50%;
|
||||
background: var(--brand);
|
||||
color: #fff;
|
||||
font-size: 0.875rem;
|
||||
font-weight: 700;
|
||||
}
|
||||
|
||||
.step h3 {
|
||||
margin: 0 0 0.5rem;
|
||||
font-size: 1rem;
|
||||
.tier-card h3 {
|
||||
margin: 0 0 0.75rem;
|
||||
font-size: 1.0625rem;
|
||||
font-weight: 600;
|
||||
}
|
||||
|
||||
.step p {
|
||||
margin: 0;
|
||||
.tier-card p {
|
||||
flex: 1;
|
||||
margin: 0 0 1.25rem;
|
||||
font-size: 0.9375rem;
|
||||
color: var(--muted);
|
||||
}
|
||||
|
||||
.tier-card p strong {
|
||||
color: var(--text);
|
||||
font-weight: 600;
|
||||
}
|
||||
|
||||
.roadmap {
|
||||
display: grid;
|
||||
grid-template-columns: repeat(3, 1fr);
|
||||
@@ -705,6 +652,59 @@ body:has(.lightbox:target) {
|
||||
}
|
||||
}
|
||||
|
||||
.instances-list {
|
||||
display: grid;
|
||||
grid-template-columns: repeat(auto-fill, minmax(18rem, 1fr));
|
||||
gap: 1.25rem;
|
||||
margin: 0;
|
||||
padding: 0;
|
||||
list-style: none;
|
||||
}
|
||||
|
||||
.instance-card {
|
||||
display: flex;
|
||||
flex-direction: column;
|
||||
gap: 1rem;
|
||||
height: 100%;
|
||||
padding: 1.5rem;
|
||||
border: 1px solid var(--border);
|
||||
border-radius: var(--radius-lg);
|
||||
background: var(--surface);
|
||||
}
|
||||
|
||||
.instance-card__logo {
|
||||
width: auto;
|
||||
max-width: 10rem;
|
||||
max-height: 2.5rem;
|
||||
object-fit: contain;
|
||||
object-position: left center;
|
||||
}
|
||||
|
||||
.instance-card__body {
|
||||
display: flex;
|
||||
flex: 1;
|
||||
flex-direction: column;
|
||||
gap: 0.5rem;
|
||||
}
|
||||
|
||||
.instance-card__name {
|
||||
margin: 0;
|
||||
font-size: 1.125rem;
|
||||
font-weight: 600;
|
||||
}
|
||||
|
||||
.instance-card__desc {
|
||||
flex: 1;
|
||||
margin: 0;
|
||||
font-size: 0.9375rem;
|
||||
color: var(--muted);
|
||||
line-height: 1.5;
|
||||
}
|
||||
|
||||
.instance-card .repo-links {
|
||||
margin-top: 0.5rem;
|
||||
}
|
||||
|
||||
.contact-card {
|
||||
padding: 1.25rem 1.5rem;
|
||||
border: 1px solid var(--border);
|
||||
|
||||
Executable
+38
@@ -0,0 +1,38 @@
|
||||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
|
||||
ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
|
||||
ENV_FILE="${ROOT_DIR}/.env.prod"
|
||||
|
||||
cd "$ROOT_DIR"
|
||||
|
||||
if [[ ! -f "$ENV_FILE" ]]; then
|
||||
echo "Missing ${ENV_FILE}. Copy .env.example to .env.prod and configure it." >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# shellcheck disable=SC1090
|
||||
set -a
|
||||
source "$ENV_FILE"
|
||||
set +a
|
||||
|
||||
if [[ -z "${CLEARNET_DOMAIN:-}" ]]; then
|
||||
echo "CLEARNET_DOMAIN is not set in .env.prod" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
LIVE_DIR="${ROOT_DIR}/deploy/certs/live/${CLEARNET_DOMAIN}"
|
||||
|
||||
if [[ -f "${LIVE_DIR}/fullchain.pem" ]]; then
|
||||
echo "Certificates already exist at deploy/certs/live/${CLEARNET_DOMAIN}" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
mkdir -p "$LIVE_DIR"
|
||||
|
||||
openssl req -x509 -nodes -newkey rsa:2048 -days 1 \
|
||||
-keyout "${LIVE_DIR}/privkey.pem" \
|
||||
-out "${LIVE_DIR}/fullchain.pem" \
|
||||
-subj "/CN=${CLEARNET_DOMAIN}"
|
||||
|
||||
echo "Temporary self-signed certificates created at deploy/certs/live/${CLEARNET_DOMAIN}"
|
||||
Executable
+17
@@ -0,0 +1,17 @@
|
||||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
|
||||
ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
|
||||
ENV_FILE="${ROOT_DIR}/.env.prod"
|
||||
|
||||
cd "$ROOT_DIR"
|
||||
|
||||
if [[ ! -f "$ENV_FILE" ]]; then
|
||||
echo "Missing ${ENV_FILE}. Copy .env.example to .env.prod and configure it." >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
docker compose --env-file "$ENV_FILE" -f docker-compose.prod.yml up -d --build
|
||||
|
||||
echo "Pruning unused Docker data older than 24h..."
|
||||
docker system prune -af --filter "until=24h"
|
||||
Executable
+79
@@ -0,0 +1,79 @@
|
||||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
|
||||
ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
|
||||
ENV_FILE="${ROOT_DIR}/.env.prod"
|
||||
CERTBOT_EMAIL=""
|
||||
|
||||
usage() {
|
||||
cat <<EOF
|
||||
Usage: $(basename "$0") --email you@example.com
|
||||
|
||||
Obtain Let's Encrypt certificates for CLEARNET_DOMAIN and www.CLEARNET_DOMAIN using
|
||||
the webroot challenge. Nginx must be running and serving /.well-known/acme-challenge/
|
||||
from deploy/certbot/www.
|
||||
|
||||
Environment is read from .env.prod (CLEARNET_DOMAIN).
|
||||
EOF
|
||||
}
|
||||
|
||||
while [[ $# -gt 0 ]]; do
|
||||
case "$1" in
|
||||
--email)
|
||||
CERTBOT_EMAIL="$2"
|
||||
shift 2
|
||||
;;
|
||||
-h | --help)
|
||||
usage
|
||||
exit 0
|
||||
;;
|
||||
*)
|
||||
echo "Unknown option: $1" >&2
|
||||
usage >&2
|
||||
exit 1
|
||||
;;
|
||||
esac
|
||||
done
|
||||
|
||||
if [[ ! -f "$ENV_FILE" ]]; then
|
||||
echo "Missing ${ENV_FILE}" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# shellcheck disable=SC1090
|
||||
set -a
|
||||
source "$ENV_FILE"
|
||||
set +a
|
||||
|
||||
if [[ -z "${CLEARNET_DOMAIN:-}" ]]; then
|
||||
echo "CLEARNET_DOMAIN is not set in .env.prod" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if [[ -z "$CERTBOT_EMAIL" ]]; then
|
||||
echo "Pass --email for Let's Encrypt registration." >&2
|
||||
usage >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
mkdir -p "${ROOT_DIR}/deploy/certbot/www" "${ROOT_DIR}/deploy/certs"
|
||||
|
||||
docker run --rm \
|
||||
-v "${ROOT_DIR}/deploy/certbot/www:/var/www/certbot" \
|
||||
-v "${ROOT_DIR}/deploy/certs:/etc/letsencrypt" \
|
||||
certbot/certbot certonly \
|
||||
--webroot \
|
||||
-w /var/www/certbot \
|
||||
-d "$CLEARNET_DOMAIN" \
|
||||
-d "www.${CLEARNET_DOMAIN}" \
|
||||
--email "$CERTBOT_EMAIL" \
|
||||
--agree-tos \
|
||||
--non-interactive
|
||||
|
||||
if [[ ! -f "${ROOT_DIR}/deploy/certs/live/${CLEARNET_DOMAIN}/fullchain.pem" ]]; then
|
||||
echo "Expected certificates at deploy/certs/live/${CLEARNET_DOMAIN}" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo "Certificates issued at deploy/certs/live/${CLEARNET_DOMAIN}"
|
||||
echo "Reload nginx: docker compose --env-file .env.prod -f docker-compose.prod.yml exec nginx nginx -s reload"
|
||||
Executable
+25
@@ -0,0 +1,25 @@
|
||||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
|
||||
ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
|
||||
ENV_FILE="${ROOT_DIR}/.env.prod"
|
||||
|
||||
cd "$ROOT_DIR"
|
||||
|
||||
if [[ ! -f "$ENV_FILE" ]]; then
|
||||
echo "Missing ${ENV_FILE}" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
mkdir -p "${ROOT_DIR}/deploy/certbot/www" "${ROOT_DIR}/deploy/certs"
|
||||
|
||||
docker run --rm \
|
||||
-v "${ROOT_DIR}/deploy/certbot/www:/var/www/certbot" \
|
||||
-v "${ROOT_DIR}/deploy/certs:/etc/letsencrypt" \
|
||||
certbot/certbot renew \
|
||||
--webroot \
|
||||
-w /var/www/certbot
|
||||
|
||||
docker compose --env-file "$ENV_FILE" -f docker-compose.prod.yml exec nginx nginx -s reload
|
||||
|
||||
echo "Certificate renewal complete; nginx reloaded."
|
||||
Executable
+15
@@ -0,0 +1,15 @@
|
||||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
|
||||
ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
|
||||
ENV_FILE="${ROOT_DIR}/.env.prod"
|
||||
|
||||
cd "$ROOT_DIR"
|
||||
|
||||
if [[ ! -f "$ENV_FILE" ]]; then
|
||||
echo "Missing ${ENV_FILE}" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
docker compose --env-file "$ENV_FILE" -f docker-compose.prod.yml exec tor \
|
||||
cat /var/lib/tor/hs/hostname
|
||||
Executable
+10
@@ -0,0 +1,10 @@
|
||||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
|
||||
ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
|
||||
|
||||
cd "$ROOT_DIR"
|
||||
|
||||
git pull
|
||||
|
||||
"${ROOT_DIR}/deploy/scripts/deploy.sh"
|
||||
@@ -0,0 +1,7 @@
|
||||
FROM alpine:3.20
|
||||
|
||||
RUN apk add --no-cache tor
|
||||
|
||||
COPY torrc /etc/tor/torrc
|
||||
|
||||
CMD ["tor", "-f", "/etc/tor/torrc"]
|
||||
@@ -0,0 +1,5 @@
|
||||
SocksPort 0
|
||||
Log notice stdout
|
||||
|
||||
HiddenServiceDir /var/lib/tor/hs/
|
||||
HiddenServicePort 80 nginx:8080
|
||||
@@ -0,0 +1,29 @@
|
||||
services:
|
||||
nginx:
|
||||
build:
|
||||
context: .
|
||||
dockerfile: nginx/Dockerfile.prod
|
||||
container_name: ${COMPOSE_PROJECT_NAME}_nginx
|
||||
restart: unless-stopped
|
||||
env_file:
|
||||
- .env.prod
|
||||
ports:
|
||||
- '80:80'
|
||||
- '443:443'
|
||||
volumes:
|
||||
- ./deploy/certs:/etc/nginx/certs:ro
|
||||
- ./deploy/certbot/www:/var/www/certbot:ro
|
||||
|
||||
tor:
|
||||
build:
|
||||
context: ./deploy/tor
|
||||
container_name: ${COMPOSE_PROJECT_NAME}_tor
|
||||
restart: unless-stopped
|
||||
volumes:
|
||||
- nullcart_promo.tor.prod.data:/var/lib/tor
|
||||
depends_on:
|
||||
nginx:
|
||||
condition: service_started
|
||||
|
||||
volumes:
|
||||
nullcart_promo.tor.prod.data:
|
||||
+138
-178
@@ -38,10 +38,12 @@
|
||||
</a>
|
||||
<nav class="site-nav" aria-label="Main">
|
||||
<a href="#features">Features</a>
|
||||
<a href="#get-started">Get started</a>
|
||||
<a href="#gallery">Gallery</a>
|
||||
<a href="#demo">Live demo</a>
|
||||
<a href="#source">Open source</a>
|
||||
<a href="#roadmap">Roadmap</a>
|
||||
<a href="#instances">Instances</a>
|
||||
<a href="#contact">Contact</a>
|
||||
</nav>
|
||||
</div>
|
||||
@@ -49,72 +51,25 @@
|
||||
|
||||
<main>
|
||||
<section class="hero">
|
||||
<div class="container">
|
||||
<img
|
||||
class="hero__watermark"
|
||||
src="assets/favicon.png"
|
||||
width="463"
|
||||
height="539"
|
||||
alt=""
|
||||
aria-hidden="true"
|
||||
/>
|
||||
<div class="container hero__inner">
|
||||
<div class="hero__content">
|
||||
<p class="hero__badge">Free & open source</p>
|
||||
<h1>Self-hosted crypto shop</h1>
|
||||
<ul class="hero__highlights" aria-label="Key features">
|
||||
<li>Non-custodial</li>
|
||||
<li>No JS</li>
|
||||
<li>No accounts</li>
|
||||
<li>Clearnet & Tor onion</li>
|
||||
</ul>
|
||||
<h1>Self-hosted crypto shop for your business</h1>
|
||||
<p class="hero__sub">
|
||||
Complete, privacy-focused crypto e-commerce solution. Built with a
|
||||
mission to support the crypto economy.
|
||||
mission to grow the crypto economy.
|
||||
</p>
|
||||
<div class="hero__actions">
|
||||
<div class="hero__actions-row">
|
||||
<div class="link-group">
|
||||
<span class="link-group__label">Repository</span>
|
||||
<div class="repo-links">
|
||||
<a
|
||||
class="btn btn--primary"
|
||||
href="https://git.nobswebdev.com/nobswebdev/nullcart"
|
||||
target="_blank"
|
||||
rel="noopener noreferrer"
|
||||
>Clearnet</a
|
||||
>
|
||||
<a
|
||||
class="btn btn--ghost"
|
||||
href="http://4f5t7o2vgo4sdaliwax3isyxzfuxvbvkuwk4smfowutrvx2uneu4egyd.onion/nobswebdev/nullcart"
|
||||
target="_blank"
|
||||
rel="noopener noreferrer"
|
||||
>Tor</a
|
||||
>
|
||||
</div>
|
||||
</div>
|
||||
<div class="link-group">
|
||||
<span class="link-group__label">Live demo</span>
|
||||
<div class="repo-links">
|
||||
<a
|
||||
class="btn btn--primary"
|
||||
href="https://demo.nullcart.net/"
|
||||
target="_blank"
|
||||
rel="noopener noreferrer"
|
||||
>Clearnet</a
|
||||
>
|
||||
<a
|
||||
class="btn btn--ghost"
|
||||
href="http://3jh2ltksxtsmjidik3st6dawfdcheo2cyv2vth2365af75zdxnwqqsyd.onion/"
|
||||
target="_blank"
|
||||
rel="noopener noreferrer"
|
||||
>Tor</a
|
||||
>
|
||||
</div>
|
||||
</div>
|
||||
<a class="btn btn--ghost" href="#features">See features</a>
|
||||
</div>
|
||||
<a class="btn btn--primary" href="#features">See features</a>
|
||||
</div>
|
||||
</div>
|
||||
<img
|
||||
class="hero__visual"
|
||||
src="assets/hero_mockup.png"
|
||||
width="1024"
|
||||
height="562"
|
||||
alt="NullCart storefront on desktop and mobile"
|
||||
/>
|
||||
</div>
|
||||
</section>
|
||||
|
||||
@@ -125,67 +80,12 @@
|
||||
NullCart is a free, open-source crypto shop you host yourself. You
|
||||
run it on your server with built-in non-custodial wallets - no
|
||||
payment processors in the middle. Buyers pay in crypto without
|
||||
accounts, and the storefront runs without JavaScript. You manage
|
||||
accounts, and the storefront works without JavaScript. You manage
|
||||
products and orders from a merchant CMS, on clearnet and Tor.
|
||||
</p>
|
||||
</div>
|
||||
</section>
|
||||
|
||||
<section class="section" id="privacy">
|
||||
<div class="container">
|
||||
<h2 class="section__title">Privacy features</h2>
|
||||
<p class="section__lead">
|
||||
Privacy at every layer of the buyer experience.
|
||||
</p>
|
||||
<ul class="pillars privacy-features">
|
||||
<li class="pillar">
|
||||
<span class="pillar__dot" aria-hidden="true"></span> Free and open
|
||||
source
|
||||
</li>
|
||||
<li class="pillar">
|
||||
<span class="pillar__dot" aria-hidden="true"></span> No JS on
|
||||
buyer shop
|
||||
</li>
|
||||
<li class="pillar">
|
||||
<span class="pillar__dot" aria-hidden="true"></span> No buyer
|
||||
accounts
|
||||
</li>
|
||||
<li class="pillar">
|
||||
<span class="pillar__dot" aria-hidden="true"></span> Non-custodial
|
||||
wallets
|
||||
</li>
|
||||
<li class="pillar">
|
||||
<span class="pillar__dot" aria-hidden="true"></span> Monero
|
||||
supported
|
||||
</li>
|
||||
<li class="pillar">
|
||||
<span class="pillar__dot" aria-hidden="true"></span> Zero
|
||||
third-party processors
|
||||
</li>
|
||||
<li class="pillar">
|
||||
<span class="pillar__dot" aria-hidden="true"></span> Own wallet
|
||||
integration
|
||||
</li>
|
||||
<li class="pillar">
|
||||
<span class="pillar__dot" aria-hidden="true"></span> Encrypted
|
||||
sensitive data
|
||||
</li>
|
||||
<li class="pillar">
|
||||
<span class="pillar__dot" aria-hidden="true"></span> Auto order
|
||||
data wipe
|
||||
</li>
|
||||
<li class="pillar">
|
||||
<span class="pillar__dot" aria-hidden="true"></span> Self-hosted
|
||||
clearnet + onion
|
||||
</li>
|
||||
<li class="pillar">
|
||||
<span class="pillar__dot" aria-hidden="true"></span> SimpleX
|
||||
merchant alerts
|
||||
</li>
|
||||
</ul>
|
||||
</div>
|
||||
</section>
|
||||
|
||||
<section class="section section--border" id="features">
|
||||
<div class="container">
|
||||
<h2 class="section__title">Features</h2>
|
||||
@@ -206,17 +106,61 @@
|
||||
</svg>
|
||||
<h3>Privacy by design</h3>
|
||||
<p class="feature-card__lead">
|
||||
Your buyers don't need accounts. Your shop doesn't hoard their
|
||||
data.
|
||||
Privacy at every layer of the buyer experience. Your buyers
|
||||
don't need accounts, and your shop doesn't hoard their data.
|
||||
</p>
|
||||
<ul>
|
||||
<li>Free and open source</li>
|
||||
<li>Buyer shop works without JavaScript</li>
|
||||
<li>Works in Tor Browser strictest security mode</li>
|
||||
<li>
|
||||
No buyer accounts - orders open with a private access token
|
||||
</li>
|
||||
<li>Non-custodial shop wallets</li>
|
||||
<li>Monero supported</li>
|
||||
<li>Encrypted sensitive data at rest</li>
|
||||
<li>Automatic order data wipe</li>
|
||||
<li>Self-hosted clearnet and Tor onion</li>
|
||||
<li>SimpleX merchant alerts</li>
|
||||
</ul>
|
||||
</article>
|
||||
|
||||
<article class="feature-card">
|
||||
<svg
|
||||
class="feature-card__icon"
|
||||
viewBox="0 0 24 24"
|
||||
fill="none"
|
||||
stroke="currentColor"
|
||||
stroke-width="2"
|
||||
aria-hidden="true"
|
||||
>
|
||||
<rect x="3" y="3" width="18" height="18" rx="2" />
|
||||
<path d="M3 9h18M9 21V9" />
|
||||
</svg>
|
||||
<h3>E-commerce features</h3>
|
||||
<p class="feature-card__lead">
|
||||
A full storefront for digital and physical goods - catalog,
|
||||
cart, checkout, and fulfillment.
|
||||
</p>
|
||||
<ul>
|
||||
<li>
|
||||
No JavaScript on the buyer shop - no client-side scripts
|
||||
Product catalog, categories, and variants with image galleries
|
||||
</li>
|
||||
<li>Works in Tor Browser strictest security mode</li>
|
||||
<li>Shopping cart, checkout, and discount codes</li>
|
||||
<li>
|
||||
No sign-up or profiles - orders open with a private access
|
||||
token
|
||||
Auto-deliver digital goods and quote shipping for physical
|
||||
orders
|
||||
</li>
|
||||
<li>
|
||||
Order tracking, live payment status, and per-order buyer chat
|
||||
</li>
|
||||
<li>Custom branding - your logo, favicon, and shop name</li>
|
||||
<li>
|
||||
Shop blog for product spotlights, how-tos, and SEO-friendly
|
||||
content
|
||||
</li>
|
||||
<li>
|
||||
Prices shown in fiat, paid in crypto with live exchange rates
|
||||
</li>
|
||||
</ul>
|
||||
</article>
|
||||
@@ -249,42 +193,6 @@
|
||||
</ul>
|
||||
</article>
|
||||
|
||||
<article class="feature-card">
|
||||
<svg
|
||||
class="feature-card__icon"
|
||||
viewBox="0 0 24 24"
|
||||
fill="none"
|
||||
stroke="currentColor"
|
||||
stroke-width="2"
|
||||
aria-hidden="true"
|
||||
>
|
||||
<rect x="3" y="3" width="18" height="18" rx="2" />
|
||||
<path d="M3 9h18M9 21V9" />
|
||||
</svg>
|
||||
<h3>E-commerce features</h3>
|
||||
<p class="feature-card__lead">
|
||||
A full storefront for digital and physical goods - catalog,
|
||||
cart, checkout, and fulfillment.
|
||||
</p>
|
||||
<ul>
|
||||
<li>
|
||||
Product catalog, categories, and variants with image galleries
|
||||
</li>
|
||||
<li>Shopping cart, checkout, and discount codes</li>
|
||||
<li>
|
||||
Auto-deliver digital goods and quote shipping for physical
|
||||
orders
|
||||
</li>
|
||||
<li>
|
||||
Order tracking, live payment status, and per-order buyer chat
|
||||
</li>
|
||||
<li>Custom branding - your logo, favicon, and shop name</li>
|
||||
<li>
|
||||
Prices shown in fiat, paid in crypto with live exchange rates
|
||||
</li>
|
||||
</ul>
|
||||
</article>
|
||||
|
||||
<article class="feature-card">
|
||||
<svg
|
||||
class="feature-card__icon"
|
||||
@@ -314,32 +222,42 @@
|
||||
</div>
|
||||
</section>
|
||||
|
||||
<section class="section">
|
||||
<section class="section section--border" id="get-started">
|
||||
<div class="container">
|
||||
<h2 class="section__title">How it works</h2>
|
||||
<h2 class="section__title">Get started</h2>
|
||||
<p class="section__lead">
|
||||
Three steps from zero to selling with crypto.
|
||||
Launch on your own server: install from the guide, or get one-time
|
||||
help if you are not comfortable with VPS and DNS yourself.
|
||||
</p>
|
||||
<ol class="steps">
|
||||
<li class="step">
|
||||
<h3>Deploy</h3>
|
||||
<div class="tiers">
|
||||
<article class="tier-card">
|
||||
<h3>Self-hosted</h3>
|
||||
<p>
|
||||
Clone the repo, configure your server, and go live on HTTPS and
|
||||
Tor.
|
||||
Full NullCart is free and open source. Use the deployment guide
|
||||
in the repository to install on your VPS with HTTPS and Tor. You
|
||||
handle provisioning, DNS, and updates.
|
||||
</p>
|
||||
</li>
|
||||
<li class="step">
|
||||
<h3>Set up your shop</h3>
|
||||
<p>Add products in the CMS and upload your branding.</p>
|
||||
</li>
|
||||
<li class="step">
|
||||
<h3>Sell</h3>
|
||||
<a
|
||||
class="btn btn--primary"
|
||||
href="https://git.nobswebdev.com/nobswebdev/nullcart"
|
||||
target="_blank"
|
||||
rel="noopener noreferrer"
|
||||
>Repository</a
|
||||
>
|
||||
</article>
|
||||
<article class="tier-card">
|
||||
<h3>Managed setup</h3>
|
||||
<p>
|
||||
Buyers pay in crypto. You fulfill orders, chat when needed, and
|
||||
get notified via SimpleX.
|
||||
We will setup everything for you if you are not comfortable with
|
||||
servers yourself or you want to hand over this task to us.
|
||||
<strong>$25 USD</strong> paid in Monero covers our help to make
|
||||
your shop up and running. VPS and domain are paid separately.
|
||||
Optional upgrade to the latest version later:
|
||||
<strong>$25 USD</strong> in Monero if you ever need it.
|
||||
</p>
|
||||
</li>
|
||||
</ol>
|
||||
<a class="btn btn--primary" href="#contact">Contact</a>
|
||||
</article>
|
||||
</div>
|
||||
</div>
|
||||
</section>
|
||||
|
||||
@@ -646,12 +564,52 @@
|
||||
</div>
|
||||
</section>
|
||||
|
||||
<section class="section section--border" id="instances">
|
||||
<div class="container">
|
||||
<h2 class="section__title">Instances</h2>
|
||||
<p class="section__lead">NullCart shops hosted by the community.</p>
|
||||
<ul class="instances-list">
|
||||
<li>
|
||||
<article class="instance-card">
|
||||
<img
|
||||
class="instance-card__logo"
|
||||
src="assets/instances_logos/accsnake.png"
|
||||
width="248"
|
||||
height="40"
|
||||
alt="Accsnake"
|
||||
/>
|
||||
<div class="instance-card__body">
|
||||
<h3 class="instance-card__name">Accsnake</h3>
|
||||
<p class="instance-card__desc">
|
||||
Ready-made accounts merchant.
|
||||
</p>
|
||||
<div class="repo-links">
|
||||
<a
|
||||
class="btn btn--primary"
|
||||
href="https://accsnake.com/"
|
||||
target="_blank"
|
||||
rel="noopener noreferrer"
|
||||
>Clearnet</a
|
||||
>
|
||||
<a
|
||||
class="btn btn--ghost"
|
||||
href="http://itj7v5hhp6cohgkeuy6ijuxj7f3gak6may6glwx3z27l32lbfxktmtyd.onion/"
|
||||
target="_blank"
|
||||
rel="noopener noreferrer"
|
||||
>Tor</a
|
||||
>
|
||||
</div>
|
||||
</div>
|
||||
</article>
|
||||
</li>
|
||||
</ul>
|
||||
</div>
|
||||
</section>
|
||||
|
||||
<section class="section section--border" id="contact">
|
||||
<div class="container">
|
||||
<h2 class="section__title">Contact</h2>
|
||||
<p class="section__lead">
|
||||
Questions, feedback, or collaboration - reach out.
|
||||
</p>
|
||||
<p class="section__lead">Need help? Have questions? Reach out.</p>
|
||||
<div class="contact-grid">
|
||||
<div class="contact-card">
|
||||
<h3>Email</h3>
|
||||
@@ -676,10 +634,12 @@
|
||||
<p class="site-footer__copy">© 2026 NullCart by nobswebdev.</p>
|
||||
<nav class="site-footer__nav" aria-label="Footer">
|
||||
<a href="#features">Features</a>
|
||||
<a href="#get-started">Get started</a>
|
||||
<a href="#gallery">Gallery</a>
|
||||
<a href="#demo">Demo</a>
|
||||
<a href="#source">Open source</a>
|
||||
<a href="#roadmap">Roadmap</a>
|
||||
<a href="#instances">Instances</a>
|
||||
<a href="#contact">Contact</a>
|
||||
</nav>
|
||||
<div class="site-footer__links">
|
||||
|
||||
@@ -0,0 +1,15 @@
|
||||
FROM nginx:alpine
|
||||
|
||||
RUN apk add --no-cache gettext \
|
||||
&& rm /etc/nginx/conf.d/default.conf
|
||||
|
||||
COPY index.html /usr/share/nginx/html/
|
||||
COPY css/ /usr/share/nginx/html/css/
|
||||
COPY assets/ /usr/share/nginx/html/assets/
|
||||
|
||||
COPY nginx/conf.d/ /etc/nginx/templates/conf.d/
|
||||
COPY nginx/docker-entrypoint.sh /docker-entrypoint.sh
|
||||
|
||||
RUN chmod +x /docker-entrypoint.sh
|
||||
|
||||
ENTRYPOINT ["/docker-entrypoint.sh"]
|
||||
@@ -0,0 +1,29 @@
|
||||
server {
|
||||
listen 80;
|
||||
server_name ${CLEARNET_DOMAIN} www.${CLEARNET_DOMAIN};
|
||||
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
location / {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
}
|
||||
|
||||
server {
|
||||
listen 443 ssl;
|
||||
server_name ${CLEARNET_DOMAIN} www.${CLEARNET_DOMAIN};
|
||||
|
||||
ssl_certificate /etc/nginx/certs/live/${CLEARNET_DOMAIN}/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/certs/live/${CLEARNET_DOMAIN}/privkey.pem;
|
||||
|
||||
${ONION_LOCATION_HEADER}
|
||||
|
||||
root /usr/share/nginx/html;
|
||||
index index.html;
|
||||
|
||||
location / {
|
||||
try_files $uri $uri/ =404;
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,11 @@
|
||||
server {
|
||||
listen 8080;
|
||||
server_name _;
|
||||
|
||||
root /usr/share/nginx/html;
|
||||
index index.html;
|
||||
|
||||
location / {
|
||||
try_files $uri $uri/ =404;
|
||||
}
|
||||
}
|
||||
Executable
+18
@@ -0,0 +1,18 @@
|
||||
#!/bin/sh
|
||||
set -eu
|
||||
|
||||
export CLEARNET_DOMAIN
|
||||
|
||||
if [ -n "${ONION_HOSTNAME:-}" ]; then
|
||||
export ONION_LOCATION_HEADER="add_header Onion-Location \"http://${ONION_HOSTNAME}\$request_uri\";"
|
||||
else
|
||||
export ONION_LOCATION_HEADER=""
|
||||
fi
|
||||
|
||||
envsubst '${CLEARNET_DOMAIN} ${ONION_LOCATION_HEADER}' \
|
||||
< /etc/nginx/templates/conf.d/clearnet.conf.template \
|
||||
> /etc/nginx/conf.d/clearnet.conf
|
||||
|
||||
cp /etc/nginx/templates/conf.d/onion.conf /etc/nginx/conf.d/onion.conf
|
||||
|
||||
exec nginx -g 'daemon off;'
|
||||
Reference in New Issue
Block a user