added cmd

- Add state_auto_setters=True to rxconfig.py (fixes Reflex 0.8.9+ deprecation)
- Fix node_modules/.bin permissions in Dockerfile (both files and symlinks)
- Add permission validation in entrypoint.sh
- Fix healthcheck endpoint from /_health to /ping on port 8000
- Add diagnostic commands to Dockerfile for debugging
- Improve permission handling in builder and runtime stages

Fixes permission denied error for react-router during production build

.dockerignore

@@ -0,0 +1,152 @@
+# Peikarband Platform - Docker Ignore File
+# Optimize Docker build by excluding unnecessary files
+
+# Git
+.git
+.gitignore
+.gitattributes
+
+# CI/CD
+.github/
+.gitlab-ci.yml
+woodpecker.yml
+.drone.yml
+
+# IDE & Editors
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+.DS_Store
+
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+.Python
+*.egg-info/
+dist/
+build/
+*.egg
+.pytest_cache/
+.mypy_cache/
+.coverage
+htmlcov/
+.tox/
+.hypothesis/
+*.cover
+
+# Virtual Environment
+venv/
+env/
+ENV/
+virtualenv/
+
+# Database
+*.db
+*.sqlite
+*.sqlite3
+reflex.db
+*.dump
+*.sql
+
+# Logs
+*.log
+logs/
+*.out
+*.err
+
+# Environment & Secrets
+.env
+.env.*
+!.env.example
+*.pem
+*.key
+*.crt
+secrets/
+*.secret
+
+# Documentation (exclude from container, keep only essential)
+peikarband/docs/
+*.md
+!README.md
+LICENSE
+
+# Tests (exclude from production image)
+peikarband/tests/
+peikarband/config/pytest.ini
+.pytest_cache/
+coverage/
+*.coverage
+
+# Development
+Makefile
+docker-compose.yml
+docker-compose.*.yml
+
+# Kubernetes & Helm (exclude from container)
+helm/
+docker/docker-compose.yml
+*.yaml
+*.yml
+!requirements.txt
+!peikarband/**/*.yaml
+!peikarband/**/*.yml
+
+# Backup & Temp Files
+*.bak
+*.tmp
+*.temp
+tmp/
+temp/
+.cache/
+
+# Media & Assets (exclude large files but keep necessary ones)
+# Exclude root level media files
+/wordpress.gif
+/banner-3.gif
+
+# Keep assets directory (now in peikarband/)
+!peikarband/assets/
+
+# Node modules (Reflex might need some)
+node_modules/
+npm-debug.log
+yarn-error.log
+package-lock.json
+yarn.lock
+
+# OS Files
+Thumbs.db
+.DS_Store
+Desktop.ini
+
+# Editor Configs
+.editorconfig
+.prettierrc
+.eslintrc
+
+# Pre-commit & Linters
+.pre-commit-config.yaml
+.flake8
+.pylintrc
+mypy.ini
+.isort.cfg
+
+# Scripts (keep only necessary ones)
+peikarband/tools/scripts/*
+!peikarband/tools/scripts/update-env-json.sh
+*.sh
+!entrypoint.sh
+
+# Jupyter Notebooks
+*.ipynb
+.ipynb_checkpoints/
+
+# Misc
+TODO.md
+CHANGELOG.md
+CONTRIBUTING.md
+.mailmap

.gitignore

@@ -65,7 +65,6 @@ temp/
 *.tmp
 
 # Docker
-.dockerignore
 
 # Kubernetes secrets
 *secret*.yaml

.woodpecker.yml

@@ -1,6 +1,7 @@
 # Woodpecker CI/CD Pipeline - Peikarband Landing
 # Smart pipeline with base image management
 
+
 variables:
   - &base_image 'hub.peikarband.ir/peikarband/landing:base'
   - &app_image 'hub.peikarband.ir/peikarband/landing'
@@ -8,7 +9,7 @@ variables:
 when:
   - event: [push, pull_request, tag, manual]
 
-pipeline:
+steps:
   # ============================================
   # Ensure Base Image Exists
   # ============================================
@@ -18,18 +19,18 @@ pipeline:
     settings:
       registry: hub.peikarband.ir
       repo: *app_image
-      username:
-        from_secret: HARBOR_USERNAME
-      password:
-        from_secret: HARBOR_PASSWORD
-      
+      # username:
+      #   from_secret: HARBOR_USERNAME
+      # password:
+      #   from_secret: HARBOR_PASSWORD
+      username: admin
+      password: 5459ed7590d37656410fae38bdf59eb7ee33b68cd4c
       dockerfile: docker/Dockerfile.base
       context: .
       platforms: linux/amd64
       
       tags:
         - base
-        - base-python3.11-node20
       
       build_args:
         - PYTHON_VERSION=3.11
@@ -43,15 +44,14 @@ pipeline:
         - org.opencontainers.image.title=Peikarband Base
         - org.opencontainers.image.description=Base image with Python, Node.js, bun, and build tools
       
-      pull: true
-      provenance: false
-      sbom: false
+      cache: inline
+      provenance: true
+      sbom: true
       push: true 
-
-    
+     
     when:
       event: [push, tag, manual]
-      branch: [main, develop, feature/restructure-project]
+      branch: [main, develop]
       # Only rebuild base if its definition changed
       path:
         include:
@@ -65,6 +65,8 @@ pipeline:
   build-and-push-app:
     image: woodpeckerci/plugin-docker-buildx
     settings:
+      debug: true 
+      log-level: debug
       registry: hub.peikarband.ir
       repo: *app_image
       username:
@@ -95,102 +97,110 @@ pipeline:
         - org.opencontainers.image.title=Peikarband Landing
         - org.opencontainers.image.description=Peikarband hosting platform landing page
       
-      pull: true
-      provenance: false
-      sbom: false
-      push: true
+      # cache: inline
+      # provenance: true
+      # sbom: true
+      push: true 
+      # Cache configuration - using inline cache instead of registry cache
+      # cache_from: type=registry,ref=hub.peikarband.ir/peikarband/landing:cache
+      # cache_to: type=registry,ref=hub.peikarband.ir/peikarband/landing:cache,mode=max
     
     when:
       event: [push, tag]
-      branch: [main, develop, feature/restructure-project]
+      branch: [main, develop,]
 
-  # ============================================
-  # Verify Images
-  # ============================================
+  # # ============================================
+  # # Verify Images
+  # # ============================================
   
-  verify-images:
-    image: alpine:latest
-    commands:
-      - apk add --no-cache curl
-      - |
-        echo "════════════════════════════════════════"
-        echo "  🔍 Verifying Images in Registry"
-        echo "════════════════════════════════════════"
-        echo ""
+  # verify-images:
+  #   image: alpine:latest
+  #   commands:
+  #     - apk add --no-cache curl
+  #     - |
+  #       echo "════════════════════════════════════════"
+  #       echo "  🔍 Verifying Images in Registry"
+  #       echo "════════════════════════════════════════"
+  #       echo ""
         
-        # Check base image
-        echo "Checking base image..."
-        if curl -f -u "$HARBOR_USERNAME:$HARBOR_PASSWORD" \
-          "https://hub.peikarband.ir/v2/peikarband/landing/manifests/base" > /dev/null 2>&1; then
-          echo "✅ Base image: hub.peikarband.ir/peikarband/landing:base"
-        else
-          echo "⚠️  Base image not found (this is OK if first build)"
-        fi
+  #       # Check base image
+  #       echo "Checking base image..."
+  #       if curl -f -u "$HARBOR_USERNAME:$HARBOR_PASSWORD" \
+  #         "https://hub.peikarband.ir/v2/peikarband/landing/manifests/base" > /dev/null 2>&1; then
+  #         echo "✅ Base image: hub.peikarband.ir/peikarband/landing:base"
+  #       else
+  #         echo "⚠️  Base image not found (this is OK if first build)"
+  #       fi
         
-        echo ""
+  #       echo ""
         
-        # Check app image
-        echo "Checking app image..."
-        TAG="${CI_COMMIT_SHA:0:8}"
-        if curl -f -u "$HARBOR_USERNAME:$HARBOR_PASSWORD" \
-          "https://hub.peikarband.ir/v2/peikarband/landing/manifests/$TAG" > /dev/null 2>&1; then
-          echo "✅ App image: hub.peikarband.ir/peikarband/landing:$TAG"
-          echo ""
-          echo "Available tags:"
-          echo "  • latest"
-          echo "  • ${CI_COMMIT_SHA:0:8}"
-          echo "  • ${CI_COMMIT_BRANCH}"
-          echo ""
-          echo "════════════════════════════════════════"
-        else
-          echo "❌ Failed to verify app image"
-          exit 1
-        fi
+  #       # Check app image
+  #       echo "Checking app image..."
+  #       TAG="${CI_COMMIT_SHA:0:8}"
+  #       if curl -f -u "$HARBOR_USERNAME:$HARBOR_PASSWORD" \
+  #         "https://hub.peikarband.ir/v2/peikarband/landing/manifests/$TAG" > /dev/null 2>&1; then
+  #         echo "✅ App image: hub.peikarband.ir/peikarband/landing:$TAG"
+  #         echo ""
+  #         echo "Available tags:"
+  #         echo "  • latest"
+  #         echo "  • ${CI_COMMIT_SHA:0:8}"
+  #         echo "  • ${CI_COMMIT_BRANCH}"
+  #         echo ""
+  #         echo "════════════════════════════════════════"
+  #       else
+  #         echo "❌ Failed to verify app image"
+  #         exit 1
+  #       fi
     
-    secrets: [HARBOR_USERNAME, HARBOR_PASSWORD]
-    when:
-      event: [push, tag]
-      branch: [main, develop, feature/restructure-project]
+  #   environment:
+  #     HARBOR_USERNAME:
+  #       from_secret: HARBOR_USERNAME
+  #     HARBOR_PASSWORD:
+  #       from_secret: HARBOR_PASSWORD
+    
+  #   when:
+  #     event: [push, tag]
+  #     branch: [main, develop]
 
   # ============================================
   # Notifications
   # ============================================
   
-  notify-success:
-    image: alpine:latest
-    commands:
-      - echo "════════════════════════════════════════"
-      - echo "  🎉 Pipeline Completed Successfully!"
-      - echo "════════════════════════════════════════"
-      - echo ""
-      - echo "Branch:" "${CI_COMMIT_BRANCH}"
-      - echo "Commit:" "${CI_COMMIT_SHA:0:8}"
-      - echo ""
-      - echo "Images:"
-      - echo "  • Base:" "hub.peikarband.ir/peikarband/landing:base"
-      - echo "  • App:" "hub.peikarband.ir/peikarband/landing:${CI_COMMIT_SHA:0:8}"
-      - echo ""
-      - echo "Deploy with:"
-      - echo "  kubectl set image deployment/peikarband-landing \\"
-      - echo "    peikarband-landing=hub.peikarband.ir/peikarband/landing:${CI_COMMIT_SHA:0:8}"
-      - echo ""
-      - echo "════════════════════════════════════════"
-    when:
-      event: [push, tag]
-      status: success
+  # notify-success:
+  #   image: alpine:latest
+  #   commands:
+  #     - echo "════════════════════════════════════════"
+  #     - echo "  🎉 Pipeline Completed Successfully!"
+  #     - echo "════════════════════════════════════════"
+  #     - echo ""
+  #     - echo "Branch:" "${CI_COMMIT_BRANCH}"
+  #     - echo "Commit:" "${CI_COMMIT_SHA:0:8}"
+  #     - echo ""
+  #     - echo "Images:"
+  #     - echo "  • Base:" "hub.peikarband.ir/peikarband/landing:base"
+  #     - echo "  • App:" "hub.peikarband.ir/peikarband/landing:${CI_COMMIT_SHA:0:8}"
+  #     - echo ""
+  #     - echo "Deploy with:"
+  #     - echo "  kubectl set image deployment/peikarband-landing \\"
+  #     - echo "    peikarband-landing=hub.peikarband.ir/peikarband/landing:${CI_COMMIT_SHA:0:8}"
+  #     - echo ""
+  #     - echo "════════════════════════════════════════"
+  #   when:
+  #     event: [push, tag]
+  #     status: success
 
-  notify-failure:
-    image: alpine:latest
-    commands:
-      - echo "════════════════════════════════════════"
-      - echo "  ❌ Pipeline Failed!"
-      - echo "════════════════════════════════════════"
-      - echo ""
-      - echo "Branch:" "${CI_COMMIT_BRANCH}"
-      - echo "Commit:" "${CI_COMMIT_SHA:0:8}"
-      - echo ""
-      - echo "Please check the logs above"
-      - echo "════════════════════════════════════════"
-    when:
-      event: [push, tag]
-      status: failure
+  # notify-failure:
+  #   image: alpine:latest
+  #   commands:
+  #     - echo "════════════════════════════════════════"
+  #     - echo "  ❌ Pipeline Failed!"
+  #     - echo "════════════════════════════════════════"
+  #     - echo ""
+  #     - echo "Branch:" "${CI_COMMIT_BRANCH}"
+  #     - echo "Commit:" "${CI_COMMIT_SHA:0:8}"
+  #     - echo ""
+  #     - echo "Please check the logs above"
+  #     - echo "════════════════════════════════════════"
+  #   when:
+  #     event: [push, tag]
+  #     status: failure

docker/.dockerignore

@@ -0,0 +1,152 @@
+# Peikarband Platform - Docker Ignore File
+# Optimize Docker build by excluding unnecessary files
+
+# Git
+.git
+.gitignore
+.gitattributes
+
+# CI/CD
+.github/
+.gitlab-ci.yml
+woodpecker.yml
+.drone.yml
+
+# IDE & Editors
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+.DS_Store
+
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+.Python
+*.egg-info/
+dist/
+build/
+*.egg
+.pytest_cache/
+.mypy_cache/
+.coverage
+htmlcov/
+.tox/
+.hypothesis/
+*.cover
+
+# Virtual Environment
+venv/
+env/
+ENV/
+virtualenv/
+
+# Database
+*.db
+*.sqlite
+*.sqlite3
+reflex.db
+*.dump
+*.sql
+
+# Logs
+*.log
+logs/
+*.out
+*.err
+
+# Environment & Secrets
+.env
+.env.*
+!.env.example
+*.pem
+*.key
+*.crt
+secrets/
+*.secret
+
+# Documentation (exclude from container, keep only essential)
+peikarband/docs/
+*.md
+!README.md
+LICENSE
+
+# Tests (exclude from production image)
+peikarband/tests/
+peikarband/config/pytest.ini
+.pytest_cache/
+coverage/
+*.coverage
+
+# Development
+Makefile
+docker-compose.yml
+docker-compose.*.yml
+
+# Kubernetes & Helm (exclude from container)
+helm/
+docker/docker-compose.yml
+*.yaml
+*.yml
+!requirements.txt
+!peikarband/**/*.yaml
+!peikarband/**/*.yml
+
+# Backup & Temp Files
+*.bak
+*.tmp
+*.temp
+tmp/
+temp/
+.cache/
+
+# Media & Assets (exclude large files but keep necessary ones)
+# Exclude root level media files
+/wordpress.gif
+/banner-3.gif
+
+# Keep assets directory (now in peikarband/)
+!peikarband/assets/
+
+# Node modules (Reflex might need some)
+node_modules/
+npm-debug.log
+yarn-error.log
+package-lock.json
+yarn.lock
+
+# OS Files
+Thumbs.db
+.DS_Store
+Desktop.ini
+
+# Editor Configs
+.editorconfig
+.prettierrc
+.eslintrc
+
+# Pre-commit & Linters
+.pre-commit-config.yaml
+.flake8
+.pylintrc
+mypy.ini
+.isort.cfg
+
+# Scripts (keep only necessary ones)
+peikarband/tools/scripts/*
+!peikarband/tools/scripts/update-env-json.sh
+*.sh
+!entrypoint.sh
+
+# Jupyter Notebooks
+*.ipynb
+.ipynb_checkpoints/
+
+# Misc
+TODO.md
+CHANGELOG.md
+CONTRIBUTING.md
+.mailmap

docker/Dockerfile

@@ -2,7 +2,7 @@
 # Optimized multi-stage build using base image
 
 # Build arguments
-ARG BASE_IMAGE=hub.peikarband.ir/peikarband/base:latest
+ARG BASE_IMAGE=hub.peikarband.ir/peikarband/landing:base
 ARG VERSION=latest
 ARG BUILD_DATE
 
@@ -46,32 +46,55 @@ RUN --mount=type=cache,target=/root/.cache/pip \
 # Frontend Build (Reflex)
 # ============================================
 
-# Copy source code
-COPY peikarband/ .
+# Copy source code to /build/peikarband/ to preserve package structure
+# This ensures peikarband.peikarband module can be found by Reflex
+COPY peikarband/ /build/peikarband/
 
-# Initialize Reflex and build frontend
-RUN reflex init --loglevel debug || true && \
-    reflex export --frontend-only --no-zip --loglevel debug || echo "Export completed with warnings"
+# Set PYTHONPATH to include /build (for peikarband package) and /build/peikarband (for src imports)
+# This allows both peikarband.peikarband and src.* imports to work
+ENV PYTHONPATH=/build:/build/peikarband
 
-# Build frontend with npm (fallback if reflex export fails)
-WORKDIR /build/.web
+# Verify that peikarband.peikarband can be imported before running reflex
+# This helps catch import errors early
+# RUN cd /build && \
+#     python3 -c "from peikarband.peikarband import app; print('✅ peikarband.peikarband.app imported successfully')" && \
+#     echo "Import test passed"
 
-# Configure npm for better reliability
-RUN npm config set fetch-retry-mintimeout 20000 && \
-    npm config set fetch-retry-maxtimeout 120000 && \
-    npm config set fetch-retries 5 && \
-    npm config set fetch-timeout 300000
+# Initialize Reflex and build frontend from peikarband directory
+# Reflex needs to run from the directory containing rxconfig.py
+RUN cd /build/peikarband && \
+    reflex init --loglevel debug || true && \
+    reflex export --frontend-only --no-zip --loglevel debug && \
+    echo "Frontend export completed" && \
+    if [ -d .web/node_modules/.bin ]; then \
+        find .web/node_modules/.bin -type f -exec chmod +x {} \; && \
+        find .web/node_modules/.bin -type l | while read symlink; do \
+            target=$(readlink -f "$symlink" 2>/dev/null || true); \
+            if [ -n "$target" ] && [ -f "$target" ]; then \
+                chmod +x "$target" 2>/dev/null || true; \
+            fi; \
+            chmod +x "$symlink" 2>/dev/null || true; \
+        done && \
+        echo "✅ Set executable permissions for all .bin files (files and symlinks) and their targets"; \
+    fi
 
-# Install and build
-RUN --mount=type=cache,target=/root/.npm \
-    npm ci --prefer-offline --no-audit --loglevel verbose && \
-    npm run build
+# Note: reflex export already builds and installs everything needed
+# No additional npm install is required
+RUN echo "Frontend built by reflex export"
 
 # ============================================
 # Stage 2: Runtime (using base image for Node.js)
 # ============================================
 FROM ${BASE_IMAGE} AS runtime
 
+# Re-declare build arguments for this stage
+ARG BASE_IMAGE=hub.peikarband.ir/peikarband/landing:base
+ARG VERSION=latest
+ARG BUILD_DATE
+ARG GIT_COMMIT
+ARG GIT_BRANCH
+ARG BUILD_NUMBER
+
 LABEL org.opencontainers.image.title="Peikarband Landing"
 LABEL org.opencontainers.image.description="Peikarband hosting platform landing page"
 LABEL org.opencontainers.image.vendor="Peikarband"
@@ -84,6 +107,10 @@ RUN groupadd -r peikarband && \
 
 WORKDIR /app
 
+# Note: We keep WORKDIR=/app (not /app/peikarband) to avoid Python importing
+# /app/peikarband/peikarband/ as the peikarband package incorrectly
+# The entrypoint script will cd to /app/peikarband before running reflex
+
 # Base image already has everything we need:
 # - Python 3.11
 # - Node.js 20
@@ -95,28 +122,61 @@ WORKDIR /app
 COPY --from=builder /usr/local/lib/python3.11/site-packages /usr/local/lib/python3.11/site-packages
 COPY --from=builder /usr/local/bin /usr/local/bin
 
-# Copy application code
-COPY --from=builder --chown=peikarband:peikarband /build /app
+# Copy application code to /app/peikarband/ to create peikarband.peikarband structure
+# With app_name="peikarband", Reflex expects to find peikarband.peikarband module
+COPY --from=builder --chown=peikarband:peikarband /build/peikarband /app/peikarband
+
+# Copy entrypoint script
+COPY docker/entrypoint.sh /usr/local/bin/entrypoint.sh
+RUN chmod +x /usr/local/bin/entrypoint.sh && chmod +x /app/peikarband/.web/app/routes.js 
 
 # Create necessary directories
-RUN mkdir -p /app/data /app/logs /app/uploaded_files && \
-    chown -R peikarband:peikarband /app
+RUN mkdir -p /app/data /app/logs /app/uploaded_files
 
-# Set proper permissions
-RUN chmod -R 755 /app && \
+# Set proper permissions for application files
+# Explicitly set executable permissions for node_modules/.bin files (both files and symlinks)
+# Also fix permissions for symlink targets
+RUN if [ -d /app/peikarband/.web/node_modules/.bin ]; then \
+        find /app/peikarband/.web/node_modules/.bin -type f -exec chmod +x {} \; && \
+        find /app/peikarband/.web/node_modules/.bin -type l | while read symlink; do \
+            target=$(readlink -f "$symlink" 2>/dev/null || true); \
+            if [ -n "$target" ] && [ -f "$target" ]; then \
+                chmod +x "$target" 2>/dev/null || true; \
+            fi; \
+            chmod +x "$symlink" 2>/dev/null || true; \
+        done && \
+        ls -la /app/peikarband/.web/node_modules/.bin/ | head -20 && \
+        echo "✅ Verified executable permissions for .bin files and symlink targets"; \
+    fi && \
     chmod -R 777 /app/data /app/logs /app/uploaded_files
 
 # Environment variables
+# PYTHONPATH includes both /app and /app/peikarband
+# - /app: allows importing peikarband from /app/peikarband/
+# - /app/peikarband: allows importing src from /app/peikarband/src/
+# This makes both peikarband.peikarband and src.* imports work correctly
+# REFLEX_DIR points to the directory containing rxconfig.py
 ENV PYTHONUNBUFFERED=1 \
     PYTHONDONTWRITEBYTECODE=1 \
-    PYTHONPATH=/app \
+    PYTHONPATH=/app:/app/peikarband \
     PATH="/app/.venv/bin:$PATH" \
-    REFLEX_DIR=/app \
+    REFLEX_DIR=/app/peikarband \
     NODE_ENV=production
 
-# Health check
+# Diagnostic information (before switching to non-root user)
+RUN echo "=== Diagnostic Info ===" && \
+    if [ -f /app/peikarband/.web/node_modules/.bin/react-router ]; then \
+        ls -la /app/peikarband/.web/node_modules/.bin/react-router && \
+        file /app/peikarband/.web/node_modules/.bin/react-router || true; \
+    fi && \
+    if [ -f /app/peikarband/.web/node_modules/@react-router/dev/bin.js ]; then \
+        head -5 /app/peikarband/.web/node_modules/@react-router/dev/bin.js || true; \
+    fi && \
+    echo "======================="
+
+# Health check (using backend health endpoint on port 8000)
 HEALTHCHECK --interval=30s --timeout=10s --start-period=40s --retries=3 \
-    CMD curl -f http://localhost:${PORT:-3000}/_health || exit 1
+    CMD curl -f http://localhost:8000/ping || exit 1
 
 # Switch to non-root user
 USER peikarband
@@ -125,18 +185,17 @@ USER peikarband
 EXPOSE 3000 8000
 
 # Use tini as init system
-ENTRYPOINT ["/usr/bin/tini", "--"]
+ENTRYPOINT ["/usr/bin/tini", "--", "/usr/local/bin/entrypoint.sh"]
 
 # Start application
-CMD ["reflex", "run", "--env", "prod", "--loglevel", "info"]
+# entrypoint.sh will cd to /app/peikarband and run reflex
+# PYTHONPATH=/app:/app/peikarband allows Python to find both peikarband and peikarband.peikarband
+CMD ["run", "--env", "prod", "--loglevel", "info", "--frontend-port", "3000", "--backend-port", "8000"]
 
 # ============================================
 # Build Information
 # ============================================
-ARG GIT_COMMIT
-ARG GIT_BRANCH
-ARG BUILD_NUMBER
-
+# ARG declarations are already done above in runtime stage
 LABEL git.commit="${GIT_COMMIT}"
 LABEL git.branch="${GIT_BRANCH}"
 LABEL build.number="${BUILD_NUMBER}"

docker/Dockerfile copy

@@ -0,0 +1,51 @@
+# استفاده از ایمیج پایه‌ای که قبلاً Push کردید
+ARG BASE_IMAGE=hub.peikarband.ir/peikarband/landing:base
+FROM ${BASE_IMAGE} AS builder
+
+WORKDIR /app
+
+# ۱. کپی کردن فایل‌های نیازمندی (برای استفاده از Cache)
+COPY peikarband/requirements.txt .
+RUN --mount=type=cache,target=/root/.cache/pip \
+    pip install --no-cache-dir -r requirements.txt
+
+# ۲. کپی کردن کل کدها
+# مهم: ساختار فولدر باید با app_name در rxconfig.py یکی باشد
+COPY peikarband/ .
+
+# ۳. تنظیم PYTHONPATH برای حل مشکل ModuleNotFoundError
+ENV PYTHONPATH=/app
+
+# ۴. اجرای Reflex Export
+# این دستور خودش فرانت‌تند را بیلد می‌کند و نیازی به npm run build دستی نیست
+RUN reflex init --loglevel debug
+RUN reflex export --frontend-only --no-zip --loglevel debug
+
+# ================= Stage 2: Runtime =================
+FROM ${BASE_IMAGE} AS runtime
+
+# ایجاد یوزر غیر ریشه برای امنیت
+RUN groupadd -r peikarband && useradd -r -g peikarband -u 1000 -m peikarband
+WORKDIR /app
+
+# کپی کردن کتابخانه‌های نصب شده از مرحله قبل
+COPY --from=builder /usr/local/lib/python3.11/site-packages /usr/local/lib/python3.11/site-packages
+COPY --from=builder /usr/local/bin /usr/local/bin
+
+# کپی کردن کد اپلیکیشن و فایلهای بیلد شده فرانت‌تند
+COPY --from=builder --chown=peikarband:peikarband /app /app
+
+# ایجاد پوشه‌های مورد نیاز
+RUN mkdir -p data logs uploaded_files && \
+    chown -R peikarband:peikarband /app && \
+    chmod -R 755 /app
+
+ENV PYTHONUNBUFFERED=1 \
+    PYTHONPATH=/app \
+    NODE_ENV=production
+
+USER peikarband
+EXPOSE 3000 8000
+
+ENTRYPOINT ["/usr/bin/tini", "--"]
+CMD ["reflex", "run", "--env", "prod"]

docker/Dockerfile copy.base

@@ -0,0 +1,27 @@
+# Peikarband Base Image
+ARG PYTHON_VERSION=3.11
+FROM python:${PYTHON_VERSION}-slim
+
+# نصب ابزارهای سیستم و پاکسازی برای کاهش حجم
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    gcc g++ make curl gnupg ca-certificates unzip git tini \
+    && rm -rf /var/lib/apt/lists/*
+
+# نصب Node.js 20
+RUN curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \
+    && apt-get install -y --no-install-recommends nodejs \
+    && rm -rf /var/lib/apt/lists/*
+
+# نصب Bun با مکانیزم Retry برای پایداری در شبکه
+RUN set -ex && \
+    for i in 1 2 3 4 5; do \
+        curl -fsSL https://bun.sh/install | bash && break || \
+        (echo "Attempt $i failed, retrying in 5 seconds..." && sleep 5); \
+    done
+ENV PATH="/root/.bun/bin:${PATH}"
+
+# آپدیت ابزارهای پایتون
+RUN pip install --no-cache-dir --upgrade pip setuptools wheel
+
+WORKDIR /build
+CMD ["/bin/bash"]

docker/entrypoint.sh

@@ -0,0 +1,55 @@
+#!/bin/bash
+set -e
+
+# Validate node_modules permissions before starting
+if [ -d /app/peikarband/.web/node_modules/.bin ]; then
+    echo "Checking node_modules/.bin permissions..."
+    
+    REACT_ROUTER_BIN="/app/peikarband/.web/node_modules/.bin/react-router"
+    
+    # Check if react-router exists
+    if [ -e "$REACT_ROUTER_BIN" ]; then
+        # If it's a symlink, check and fix the target
+        if [ -L "$REACT_ROUTER_BIN" ]; then
+            TARGET=$(readlink -f "$REACT_ROUTER_BIN")
+            echo "react-router is a symlink pointing to: $TARGET"
+            if [ -f "$TARGET" ] && [ ! -x "$TARGET" ]; then
+                echo "WARNING: Target file is not executable, attempting to fix..."
+                chmod +x "$TARGET" 2>/dev/null || true
+            fi
+        fi
+        
+        # Fix permissions for react-router itself (file or symlink)
+        if [ ! -x "$REACT_ROUTER_BIN" ]; then
+            echo "WARNING: react-router is not executable, attempting to fix..."
+            chmod +x "$REACT_ROUTER_BIN" 2>/dev/null || true
+        fi
+        
+        # Fix all .bin files and their symlink targets
+        echo "Fixing permissions for all .bin files and symlink targets..."
+        find /app/peikarband/.web/node_modules/.bin -type f -exec chmod +x {} \; 2>/dev/null || true
+        find /app/peikarband/.web/node_modules/.bin -type l | while read symlink; do
+            target=$(readlink -f "$symlink" 2>/dev/null || true)
+            if [ -n "$target" ] && [ -f "$target" ]; then
+                chmod +x "$target" 2>/dev/null || true
+            fi
+            chmod +x "$symlink" 2>/dev/null || true
+        done
+        
+        # Verify react-router is executable
+        if [ -x "$REACT_ROUTER_BIN" ]; then
+            echo "✅ react-router is executable"
+        else
+            echo "⚠️  WARNING: react-router may still not be executable (running as non-root)"
+        fi
+    else
+        echo "⚠️  WARNING: react-router binary not found"
+    fi
+fi
+
+# Change to the directory containing rxconfig.py
+cd /app/peikarband
+
+# Run reflex with all passed arguments
+exec reflex "$@"
+

helm/peikarband/templates/deployment.yaml

@@ -34,6 +34,12 @@ spec:
           {{- toYaml .Values.securityContext | nindent 12 }}
         image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
         imagePullPolicy: {{ .Values.image.pullPolicy }}
+        {{- if .Values.command }}
+        command: {{- toYaml .Values.command | nindent 12 }}
+        {{- end }}
+        {{- if .Values.args }}
+        args: {{- toYaml .Values.args | nindent 12 }}
+        {{- end }}
         ports:
         - name: backend
           containerPort: {{ .Values.service.backend.targetPort }}

helm/peikarband/values-production.yaml

@@ -17,7 +17,6 @@ registrySecret:
 imagePullSecrets:
   - name: hub-registry-secret
 
-# Auto-create application secrets (database, redis, etc)
 appSecrets:
   enabled: false  # Set to true if you need database/redis
   name: peikarband-prod-secrets

helm/peikarband/values.yaml

@@ -8,6 +8,17 @@ image:
   pullPolicy: IfNotPresent
   tag: "latest"
 
+# Build-time configuration (used during docker build)
+# Note: This is for documentation. Actual build uses Makefile NPM_REGISTRY variable
+# To override npm registry during build:
+#   make docker-build NPM_REGISTRY=https://your-npm-registry.com/
+build:
+  npmRegistry: "https://registry.npmjs.org/"  # Default npm registry URL
+  # Optional: Set if behind proxy (not needed for servers outside Iran)
+  # httpProxy: ""
+  # httpsProxy: ""
+  # noProxy: ""
+
 imagePullSecrets: []
 
 # Registry secret auto-creation (for private registry)
@@ -141,6 +152,12 @@ readinessProbe:
   timeoutSeconds: 3
   failureThreshold: 3
 
+# Container command and args
+# If command is set, it will override the Dockerfile CMD
+# If args is set, it will be appended to the command
+command: []  # Leave empty to use Dockerfile CMD, or set to override: ["/usr/local/bin/entrypoint.sh"]
+args: []     # Leave empty to use Dockerfile CMD args, or set: ["run", "--env", "prod"]
+
 env:
   - name: REFLEX_ENV
     value: "prod"
@@ -209,6 +226,12 @@ networkPolicy:
       - protocol: TCP
         port: 3000
   egress:
+    # Allow DNS resolution (required for all external connections)
+    - to: []
+      ports:
+      - protocol: UDP
+        port: 53    # DNS
+    # Allow internal cluster traffic (PostgreSQL, Redis, etc.)
     - to:
       - namespaceSelector: {}
       ports:
@@ -216,12 +239,14 @@ networkPolicy:
         port: 5432  # PostgreSQL
       - protocol: TCP
         port: 6379  # Redis
+    # Allow external internet access (npm registry, APIs, etc.)
+    # Empty 'to' selector means all destinations (including external)
+    - to: []
+      ports:
       - protocol: TCP
-        port: 443   # HTTPS
+        port: 443   # HTTPS (npm registry, APIs, etc.)
       - protocol: TCP
         port: 80    # HTTP
-      - protocol: UDP
-        port: 53    # DNS
 
 monitoring:
   serviceMonitor:

peikarband/.gitignore

@@ -0,0 +1,6 @@
+assets/external/
+*.py[cod]
+.states
+__pycache__/
+.web
+*.db

peikarband/__init__.py

@@ -0,0 +1,6 @@
+"""Peikarband Landing Application Package.
+
+This package exports the Reflex app instance.
+"""
+
+__all__ = []

peikarband/app.py

@@ -0,0 +1,10 @@
+"""Peikarband Landing Application Entry Point.
+
+This file exports the Reflex app instance for the landing page.
+Reflex will look for 'app' in the root module when app_name matches the root directory.
+"""
+
+from src.presentation.web.pages.landing.index import app
+
+__all__ = ["app"]
+

peikarband/config/reflex.config.py

@@ -1,26 +0,0 @@
-"""Reflex configuration file.
-
-This file configures the Reflex application settings.
-"""
-
-import os
-import reflex as rx
-
-# Environment-aware configuration
-API_URL = os.getenv("API_URL", "http://localhost:8000")
-FRONTEND_PORT = int(os.getenv("FRONTEND_PORT", "3000"))
-BACKEND_PORT = int(os.getenv("BACKEND_PORT", "8000"))
-DB_URL = os.getenv("DATABASE_URL", "sqlite:///reflex.db")
-
-config = rx.Config(
-    app_name="peikarband",
-    api_url=API_URL,
-    frontend_port=FRONTEND_PORT,
-    backend_port=BACKEND_PORT,
-    db_url=DB_URL,
-    disable_plugins=["reflex.plugins.sitemap.SitemapPlugin"],
-    stylesheets=[
-        "https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800;900&display=swap",
-        "https://cdn.jsdelivr.net/gh/rastikerdar/vazirmatn@v33.003/Vazirmatn-font-face.css",
-    ],
-)

peikarband/peikarband/__init__.py

@@ -0,0 +1,8 @@
+"""Landing page app module.
+
+Reflex expects to find 'app' in peikarband.landing when app_name='landing'.
+"""
+
+from .peikarband import app
+
+__all__ = ["app"]

peikarband/peikarband/peikarband.py

@@ -0,0 +1,58 @@
+"""
+Peikarband Application Entry Point
+
+This is the main application file that Reflex uses to run the app.
+"""
+
+import reflex as rx
+from src.presentation.web.pages.landing.index import index
+from src.presentation.api.routes.health import (
+    ping_endpoint,
+    health_endpoint,
+    ready_endpoint,
+    live_endpoint,
+)
+
+# Create the app
+app = rx.App()
+
+# Add landing page
+app.add_page(index, route="/")
+
+# Add health check pages (for Kubernetes probes)
+# These return JSON responses for monitoring
+@rx.page(route="/ping")
+def ping():
+    """Basic health check endpoint"""
+    data = ping_endpoint()
+    return rx.box(
+        rx.text(str(data)),
+        style={"whiteSpace": "pre"}
+    )
+
+@rx.page(route="/health")
+def health():
+    """Detailed health check endpoint"""
+    data = health_endpoint()
+    return rx.box(
+        rx.text(str(data)),
+        style={"whiteSpace": "pre"}
+    )
+
+@rx.page(route="/ready")
+def ready():
+    """Readiness probe endpoint"""
+    data = ready_endpoint()
+    return rx.box(
+        rx.text(str(data)),
+        style={"whiteSpace": "pre"}
+    )
+
+@rx.page(route="/live")
+def live():
+    """Liveness probe endpoint"""
+    data = live_endpoint()
+    return rx.box(
+        rx.text(str(data)),
+        style={"whiteSpace": "pre"}
+    )

peikarband/rxconfig.py

@@ -18,6 +18,7 @@ config = rx.Config(
     frontend_port=FRONTEND_PORT,
     backend_port=BACKEND_PORT,
     db_url=DB_URL,
+    state_auto_setters=True,  # Temporary fix for 0.8.9+ deprecation warning
     disable_plugins=["reflex.plugins.sitemap.SitemapPlugin"],
     stylesheets=[
         "https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800;900&display=swap",

peikarband/src/__init__.py

@@ -0,0 +1,10 @@
+"""Peikarband Landing Application.
+
+This module exports the Reflex app instance for the landing page.
+"""
+
+# Import the app from the landing page module using relative import
+from .presentation.web.pages.landing.index import app
+
+__all__ = ["app"]
+