XAMXAM

(Anciennement Posterg)

Répertoire des travaux de fin d'études de l'ERG (École de Recherche Graphique).

Requirements

• PHP ≥ 8.4 (with ext-json, ext-openssl, ext-pdo, ext-sqlite3)
• Composer
• Node.js / npm
• nginx (production)

Development

# one-time
composer install
npm ci

# run the dev server (builds assets, applies migrations, opens a browser)
just dev                    # http://127.0.0.1:8000 (public) and /admin/
just stop                   # stop it

Live CSS/JS rebuilds happen automatically via a chokidar watcher while just dev runs. See docs/development.md for the full workflow.

Deployment

Files are pushed to the server with rsync — there is no repo on the remote.

just deploy     # rsync app files → xamxam:/var/www/xamxam/
just deploy-db  # push local xamxam.db → remote (only if remote DB is absent)

deploy-db refuses to run if a database already exists on the server, to avoid accidental overwrites of production data.

First-time server setup

ssh xamxam
sudo mkdir -p /var/www/xamxam
sudo chown www-data:xamxam /var/www/xamxam
sudo chmod 775 /var/www/xamxam
exit

Then deploy once and apply nginx config:

just deploy
just deploy-nginx

Security notes

• Admin panel protected by PHP session (AdminAuth) — password-only, no username
• Uploads stored outside webroot, served via controlled /media (MediaController)
• Rate limiting on public search (app/src/RateLimit.php)
• See nginx/docs/SECURITY_HEADERS.md for security headers reference

More docs

See docs/README.md for the full documentation index.