Merge pull request #35 from saifyxpro/develop

Develop

Author: saifyxpro

.env.example

@@ -14,6 +14,15 @@ PORT=8000
 HOST=0.0.0.0
 NODE_ENV=development
 
+# ------------------------------
+# 2A. SECURITY (REQUIRED)
+# ------------------------------
+# Used by the Next.js dashboard server to authenticate against the API.
+DASHBOARD_INTERNAL_API_KEY=replace-with-a-long-random-string
+
+# Used to encrypt stored proxy and profile passwords at rest.
+CREDENTIAL_ENCRYPTION_KEY=replace-with-a-different-long-random-string
+
 # ------------------------------
 # 3. PROFILE STORAGE
 # ------------------------------
@@ -42,6 +51,9 @@ LOG_DIR=./logs
 # ------------------------------
 # 5. FRONTEND (Next.js)
 # ------------------------------
+# Frontend dashboard port (used by apps/web dev/start scripts)
+WEB_PORT=3000
+
 NEXT_PUBLIC_API_URL=http://localhost:8000
 
 # CORS: Add your frontend URL for custom deployments

.nx/workspace-data/5e4c20582a474119b886afdfd66af57b.db-shm

@@ -224,11 +224,24 @@ cp .env.example .env
 # REQUIRED: Your PostgreSQL connection string
 DATABASE_URL="postgresql://user:password@host:5432/database"
 
+# REQUIRED: Internal dashboard/API secret
+DASHBOARD_INTERNAL_API_KEY="replace-with-a-long-random-string"
+
+# REQUIRED: Encryption key for stored proxy/profile passwords
+CREDENTIAL_ENCRYPTION_KEY="replace-with-a-different-long-random-string"
+
 # Optional: Server configuration
 PORT=8000
 NODE_ENV=development
 ```
 
+Generate secure values before starting the app:
+
+```bash
+openssl rand -hex 32  # DASHBOARD_INTERNAL_API_KEY
+openssl rand -hex 32  # CREDENTIAL_ENCRYPTION_KEY
+```
+
 ### 2️⃣ Install Dependencies & Setup
 
 Using Mise (Recommended):
@@ -266,6 +279,8 @@ HeadlessX can be easily deployed using Docker Compose. See the [Docker Setup Gui
 docker compose -f infra/docker/docker-compose.yml up -d
 ```
 
+The Docker stack now requires `DASHBOARD_INTERNAL_API_KEY` and `CREDENTIAL_ENCRYPTION_KEY` in `.env`. The API will refuse to boot without them.
+
 ### 6️⃣ Access the Application
 
 | Service           | URL                                            | Notes       |
@@ -282,7 +297,7 @@ You can customize ports via environment variables:
 PORT=8000 pnpm --filter api dev
 
 # Frontend
-PORT=3000 pnpm --filter web dev
+WEB_PORT=3000 pnpm --filter web dev
 ```
 
 ---
@@ -376,11 +391,16 @@ curl -X POST http://localhost:8000/api/website/html \
 
 Only the following core variables are required in `.env`:
 
-| Variable              | Default                 | Description                                     |
-| --------------------- | ----------------------- | ----------------------------------------------- |
-| `PORT`                | `8000`                  | Backend API port                                |
-| `DATABASE_URL`        | -                       | PostgreSQL connection (Supabase or self-hosted) |
-| `NEXT_PUBLIC_API_URL` | `http://localhost:8000` | Frontend API URL                                |
+| Variable                     | Default                 | Description                                               |
+| ---------------------------- | ----------------------- | --------------------------------------------------------- |
+| `PORT`                       | `8000`                  | Backend API port                                          |
+| `WEB_PORT`                   | `3000`                  | Frontend dashboard port                                   |
+| `DATABASE_URL`               | -                       | PostgreSQL connection (Supabase or self-hosted)           |
+| `NEXT_PUBLIC_API_URL`        | `http://localhost:8000` | Frontend API URL                                          |
+| `DASHBOARD_INTERNAL_API_KEY` | -                       | Required server-side secret for dashboard to API traffic  |
+| `CREDENTIAL_ENCRYPTION_KEY`  | -                       | Required key for encrypting stored proxy/profile passwords |
+
+The dashboard now proxies `/api/*` requests server-side. Do not expose `DASHBOARD_INTERNAL_API_KEY` to browser code or public env vars.
 
 ### Dashboard Settings
 

.nx/workspace-data/5e4c20582a474119b886afdfd66af57b.db-wal

@@ -31,34 +31,34 @@
   "author": "SaifyXPRO",
   "license": "MIT",
   "dependencies": {
-    "@prisma/adapter-pg": "^7.3.0",
-    "@prisma/client": "^7.3.0",
+    "@prisma/adapter-pg": "^7.4.1",
+    "@prisma/client": "^7.4.1",
     "@xenova/transformers": "^2.17.2",
     "axios": "^1.13.5",
-    "camoufox-js": "^0.8.5",
+    "camoufox-js": "^0.9.1",
     "cors": "^2.8.6",
-    "dotenv": "^17.2.3",
+    "dotenv": "^17.3.1",
     "express": "^5.2.1",
     "https-proxy-agent": "^7.0.6",
-    "onnxruntime-web": "^1.23.2",
-    "playwright-core": "^1.58.0",
-    "prisma": "^7.3.0",
+    "onnxruntime-web": "^1.24.2",
+    "playwright-core": "^1.58.2",
+    "prisma": "^7.4.1",
     "proxy-chain": "^2.7.1",
     "socks-proxy-agent": "^8.0.5",
     "turndown": "^7.2.2",
     "wavefile": "^11.0.0",
     "zod": "^4.3.6",
-    "sharp": "^0.32.6"
+    "sharp": "^0.34.5"
   },
   "devDependencies": {
     "@types/cors": "^2.8.19",
     "@types/express": "^5.0.6",
-    "@types/node": "^25.0.10",
+    "@types/node": "^25.3.0",
     "@types/turndown": "^5.0.6",
-    "dotenv-cli": "^8.0.0",
+    "dotenv-cli": "^11.0.0",
     "only-allow": "^1.2.1",
     "ts-node": "^10.9.2",
     "tsx": "^4.21.0",
     "typescript": "^5.9.3"
   }
-}
+}

.nx/workspace-data/d/server-process.json

@@ -18,15 +18,23 @@ function toSnakeCase(profile: Profile) {
         proxy_id: profile.proxyId,
         proxy_url: profile.proxyUrl,
         proxy_username: profile.proxyUsername,
-        proxy_password: profile.proxyPassword,
+        proxy_password_configured: Boolean(profile.proxyPassword),
         is_active: profile.isActive,
         is_running: profile.isRunning,
         cookies_count: profile.cookiesCount,
         storage_size_mb: profile.storageSizeMb,
         created_at: profile.createdAt,
         updated_at: profile.updatedAt,
         last_used_at: profile.lastUsedAt,
-        proxy: profile.proxy,
+        proxy: profile.proxy ? {
+            id: profile.proxy.id,
+            name: profile.proxy.name,
+            protocol: profile.proxy.protocol,
+            host: profile.proxy.host,
+            port: profile.proxy.port,
+            username: profile.proxy.username,
+            has_password: Boolean(profile.proxy.password),
+        } : null,
     };
 }