- Created complete project directory structure: - Frontend with Next.js 15.2.3 app router structure - Backend with Express API endpoints - Docker configurations with security best practices - MongoDB initialization with schema validation - Nginx configuration with security headers - Implemented core file templates: - Custom video player with transcript display options - MongoDB schemas with validation for Videos and Members - JWT authentication middleware with role-based access control - Docker Compose with resource limits and security - Frontend/backend package.json with dependencies - Updated documentation: - Enhanced TECH_STACK with latest version details - Updated TO_DO.txt with WCAG 2.2 AA requirements - Updated planned_implementation.txt with current best practices - Refreshed all Memory Bank files with current state - Security and accessibility improvements: - Added MongoDB 7.0 schema validation with - Enhanced video requirements with mandatory transcripts and thumbnails - Updated accessibility to WCAG 2.2 AA standards - Added security best practices for Docker deployments
2.5 KiB
2.5 KiB
Tech Context: OCD Website
Technologies Used
Frontend
- React 19
- TypeScript 5.8 (5x faster incremental builds)
- Next.js 15.2.3 (includes security patches for CVE-2025-29927)
- Tailwind CSS 4.0 (CSS-first configuration with @theme directives, 182x faster builds)
- Framer Motion 11
- React Router DOM 7
- React Icons 5.4
- React Simple Maps 4.0 (beta)
- React Intersection Observer 9.13
- Server Components for critical content delivery
Backend
- Node.js with Express 4.21
- TypeScript 5.8
- MongoDB 7.0 with schema validation and indexing
- Redis for caching and session management
- Nodemailer 6.9 for email handling
- CORS with proper security headers
- dotenv 16.4 for environment variable management
- JWT-based authentication with RBAC
Database
- MongoDB 7.0 with:
- Schema validation using $jsonSchema
- Field-level validation and pattern matching
- Full-text search indexes
- Compound indexes for query optimization
- Authentication and authorization
Development & Build Tools
- Docker & Docker Compose with security best practices:
- Multi-stage builds
- Non-root users for all services
- Resource limitations
- Health checks for all containers
- Security scanning with Trivy
- Portainer for container management
- PostCSS 8.4
- Autoprefixer 10.4
- pnpm 9.14 (package manager)
- Vite 6.0
- ESLint 9
- Concurrently for running multiple processes
- tsx/ts-node for TypeScript execution
- Hot module replacement (HMR)
Production
- Nginx (Production server for frontend with security headers)
- Node.js server for backend API
- SSL/TLS 1.3 for secure connections
- Network isolation with Docker
Development Setup
- Multi-container Docker setup with Docker Compose
- Hot-reloading enabled
- Separate development and production builds
- Environment variable management for sensitive data
- TypeScript configuration for both client and server
- Concurrent development server (frontend + backend)
- Automated security scanning in the build process
Technical Constraints
- Emphasis on accessibility for deaf and DeafBlind users
- WCAG 2.2 AA compliance required
- ASL video support with mandatory:
- WebVTT subtitles
- Full text transcripts
- Thumbnail previews
- Screen reader compatibility with ARIA landmarks
- High performance requirements for video content
- Secure admin access with JWT and RBAC
- Responsive design for all screen sizes
- Support for membership expiration notifications
- Requirements for Docker security best practices