truthy-api

Truthy CMS (NestJS Headless API)

This repository is Backend API part of Truthy CMS written in NestJS. For Frontend please visit https://github.com/gobeam/truthy-react-frontend. This project includes API for Authentication, User Management, Role Management, Permission Management, Email Module, Account Settings, OTP, RBAC support, Localization, and many more.

_{Created by Roshan Ranabhat (gobeam) and maintained with ❤️ by an amazing team of awesome developers.}

Table of Contents

• Getting Started
• Prerequisites
• Available Scripts
• Setup
• Docker Setup
• File Structure
• Application Security
• Contributing
• License
• Acknowledgement

---

Getting Started

This project was created to help developers by bootstrapping basic modules that need to be present while creating a standard CMS. The main motto of this project was to save precious time while developing CMS and focus more on the core part. This project is trying to follow the best possible standard to make it optimized and production-ready. Hope you like it.
If you love it don't forget to share your experience. If you want to contribute to the Truthy CMS in any way like API, Frontend, Design, Logo you're more than welcome to do so. Our plan is to make this no. 1 CMS maintained by opensource community.

---

Prerequisites

NodeJS https://nodejs.org/en/

Typescript https://www.typescriptlang.org/

PostgresQL https://www.postgresql.org/

Redis https://redis.io/

---

Available Scripts

npx truthy-api

This commands downloads the latest version of truthy i.e NestJS Truthy CMS backend API.

In the project directory, you can run:

yarn start:dev

Runs the app in the development & watch mode.
Open http://localhost:7777/api-docs to view swagger API docs in browser (only available in development mode).
You will also see any lint errors in the console.

yarn build

Builds the app for production to the build folder.

yarn lint

Lints all the files inside src,apps,libs,test folders and shows the results.

yarn format

Formats all the files inside src using prettier with config provided in .prettierrc

yarn format

Formats all the files inside src using prettier with config provided in .prettierrc

yarn coverage

Runs coverage test command and creates coverage folder with detail report which can be checked with:

yarn coveralls

yarn orm-create migration_file_name

Uses Type ORM to create a migration file. migration_file_name is Migration file name to be created.

yarn migrate

This command is used to migrate existing migration file.

yarn migration:rollback

This command is used to rollback migration.

yarn seed

This command is used to run existing seeders.

---

Setup

First, you need to install the project using npx command

npx truthy-api

or clone it using

git clone https://github.com/gobeam/truthy.git

You also need to run PostgresQL for database and Redis for key-val storage which will be used for queue and throttling. After cloning the make changes in configuration file that exists in config folder which exists in root of project. File names are named in accordance with environment you run project with. For example if you're running project in development environment you should make change in configuration of development.yml file. Please keep in mind environment variables always overrides the config.

If you want to run locally,

yarn start

If you want to view swagger docs on development open http://localhost:7777/api-docs (assuming you are running application on 7777 port)

Run Migration

yarn migrate

Run Seeders

yarn seed

Rollback Migration

yarn migration:rollback

---

Docker Setup

If you want to run project without docker you will not need to create .env file

If you want to use Docker to deploy it on production or development stage First create a .env file copying from .env.example and add environment for below parameters only since it will be used for building container using docker-compose

SERVER_PORT=7777
DB_PASSWORD=root
DB_USERNAME=postgres
DB_DATABASE_NAME=truthy
DB_PORT=5488
REDIS_PORT=6399

After creating env file make changes in configuration in accordance with you development environment. Follow setup guide in case you missed it.

Now to run containers do

docker-compose build .
docker-compose up -d

These commands will run 3 containers for PostgresQL, Redis and Main API.

To run migration on docker container

docker exec -it <container_id_or_name> yarn migrate

To run seeder on docker container

docker exec -it <container_id_or_name> yarn seed

---

File Structure

This project follows the following file structure:

truthy
├── config                                  * Contains all configuration files
│   └── default.yml                         * Default configuration file.
│   └── development.yml                     * Configuration file for development environment.
│   └── production.yml                      * Configuration file for production environment.
│   └── test.yml                            * Configuration file for test environment.    
├── coverage                                * Coverage reports after running `yarn coverage` command. 
├── dist                                    * Optimized code for production after `yarn build` is run.
├── images                                  * this folder is where uploaded profile images are stored. This folder is git ignored.
├── src                  
│   └── <module>                            * Folder where specific modules all files are stored
│       └── dto                             * Data Transfer Objects.
│       └── entity                          * Models for module.
│       └── pipes                           * Includes validation pipes for NestJS modules.
│       └── serializer                      * Includes serializer for model data.
│       └── <module>.controller.ts          * Controller file.
│       └── <module>.module.ts              * root module file for module.
│       └── <module>.service.ts             * Service file for <module>.
│       └── <module>.service.spec.ts        * Test file for service.
│       └── <module>.repository.ts          * Repository file for <module>.
│       └── <module>.repository.spec.ts     * Test file for repository.
│   └── common                              * Common helpers function, dto, entity, exception, decorators etc.
│   └── config                              * Configuration variables files.
│   └── database                            * Database folders that includes migration and seeders file
│       └── migrations                      * Migration folder includes all migration files.
│       └── seeds                           * Seeds folder includes all seeders files.
│   └── exception                           * Exception folder includes custom exceptions.
│   └── app.module.ts                       * Root module of the application.
│   └── main.ts                             * The entry file of the application which uses the core function NestFactory to create a Nest application instance.
├── test                                    * Contains E2E tests 

Some important root files

.
├── .editorconfig                           * Coding styles (also by programming language).
├── .env                                    * Environment variables for docker.
├── .prettierrc.js                          * Formatting Prettier options.
├── .eslintrc.js                            * ESLint configuration and rules.
├── .docker-compose.yml                     * Docker compose configuration.
├── Dockerfile                              * Docker file for prod environment.
├── Dockerfile.dev                          * Docker file for dev environment.
├── tsconfig.json                           * Typescript configuration for application.

---

Application Security

Throttle

By default Throttle has been implemented for all API's. Redis is default driver to record throttle state data. You can easily change configuration from config files.

Two Factor Authentication (2FA)

User Will have 2FA authentication option available to be turned on or off. For 2FA time-based one-time password is used. A time-based one-time password (TOTP) application automatically generates an authentication code that changes after a certain period of time. Applications like Authenticator, 1Password, Authy etc. can be used to generate TOTP. When you enable 2FA, you will be sent a QR code in your email which should be scanned from above mentioned application and TOTP will be generated by those applications.

---

Contributing

Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change. Please make sure to update tests as appropriate. - see CONTRIBUTING.md for details.

---

License

Released under the MIT License - see LICENSE.md for details.

---

Acknowledgement

• NestJS