Files
immich-folio/app/layout.tsx
Ralksta c9036fdc94 security: add Trivy container scan to Docker publish workflow (#399)
* feat(admin): add backup manager UI with 1-click restore

* feat(admin): collapse older backup entries by default

* fix(theme): isolate admin layout, instant DOM theme updates, and add Light/Dark mode toggle

* feat(admin): replace text controls for Photo Frame and Hero Style with visual preview cards

* fix(admin): define missing CSS rules for button system (.btn, .preset-btn)

* feat(admin): redesign theme settings with segmented mode toggle, accent color swatches, and custom iOS-style toggle cards

* feat(admin): upgrade all settings tabs with visual grid previews, Google SEO snippet preview, and toggle cards

* feat(admin): overhaul Pages Builder UX with slide-over drawer, card hover badges, real-time search, and floating save bar

* fix(admin): remove leftover dangling syntax snippet in PageBuilder.tsx

* fix(admin): add position: relative to subpage-tile so hover overlay is contained inside the tile

* style(admin): replace all emojis with clean Leica-style vector SVG icons

* fix(types): extend IconProps with SVGProps to allow style prop on Leica SVG icons

* feat(admin): add subpage live-preview, privacy analytics, and asset protection settings

* fix(typecheck): fix AlbumEntry property access in subpage drawer preview mode

* fix(types): fix ImmichAlbumInfo property names thumbnailAssetId and albumName in PageBuilder.tsx

* fix(types): add protection and watermark optional properties to AppConfig interface

* feat(settings): add toggle for disabling analytics tracking (defaults to enabled)

* feat(ux): show status banner when analytics tracking is disabled + add live sync indicator

* feat(watermark): render customizable watermark overlay on Lightbox images + rename section to Portfolio Features & Modules

* fix(types): import type LightboxWatermark in PhotoGrid.tsx

* fix(types): destructure watermark prop in PhotoGrid function signature

* feat(seo): add configurable subpage title template and metadata descriptions

* feat(seo): add generateMetadata to about page for title template support

* feat(proofing): add client proofing, favorites selection, compact URL bitmasking, and export modal

* feat(essay): add Photo Essay storytelling mode with RSC markdown parser and fullbleed/pair layouts

* feat(subpages): add page enabled toggle to deactivate subpages without deleting them

* feat(admin): add visual essay block builder for photo essay storytelling pages

* security: add Trivy container scan to Docker publish workflow

Scans the built image for CRITICAL/HIGH CVEs on every release and
uploads results to the GitHub Security tab. Non-blocking for now
(exit-code 0) so releases aren't gated on findings. Also documents
the scan and existing Dependabot coverage in the README.

---------

Co-authored-by: ralksta <ralksta@users.noreply.github.com>
2026-08-07 11:08:04 +02:00

165 lines
5.5 KiB
TypeScript

/**
* Root layout — site header with portfolio-style navigation.
* Shows all subpages + standalone albums as nav links.
* Injects theme CSS custom properties from gallery.yaml config.
*/
import type { Metadata } from 'next';
import { headers } from 'next/headers';
import Link from 'next/link';
import './globals.css';
import { SubpageNav } from '@/components/SubpageNav';
import { ThemeToggle } from '@/components/ThemeToggle';
import { ScrollToTop } from '@/components/ScrollToTop';
import { Footer } from '@/components/Footer';
import { SetupScreen } from '@/components/SetupScreen';
import { getConfigOrNull, getGoogleFontsUrl, AppConfig } from '@/lib/config';
import { isAdminPath } from '@/lib/admin/paths';
// DevToolbarLoader is a Client Component (ssr: false is only allowed there)
import { DevToolbarLoader } from '@/components/DevToolbarLoader';
import AssetProtection from '@/components/AssetProtection';
import AnalyticsTracker from '@/components/AnalyticsTracker';
export async function generateMetadata(): Promise<Metadata> {
const config = getConfigOrNull();
if (!config) {
// Nothing to describe, and nothing that should be indexed while broken.
return { title: 'Setup Required', robots: { index: false, follow: false } };
}
const siteTitle = config.seo.title;
const siteDescription = config.seo.description;
const robots = {
index: !config.seo.noIndex,
follow: !config.seo.noFollow,
};
return {
title: {
default: siteTitle,
template: config.seo.titleTemplate,
},
description: siteDescription,
robots,
icons: {
apple: '/apple-touch-icon.png',
},
openGraph: {
title: siteTitle,
description: siteDescription,
type: 'website',
images: [`/api/og?title=${encodeURIComponent(siteTitle)}`],
},
twitter: {
card: 'summary_large_image',
title: siteTitle,
description: siteDescription,
images: [`/api/og?title=${encodeURIComponent(siteTitle)}`],
},
};
}
export default async function RootLayout({ children }: { children: React.ReactNode }) {
const config = getConfigOrNull();
const pathname = (await headers()).get('x-pathname');
// gallery.yaml exists but cannot be derived — an empty gallery, a nameless
// subpage, a subpage with no albums. The admin page builder can write all
// three, and this layout is what /admin renders inside, so throwing here
// would take down the only tool that can undo the save. Render the minimum
// that keeps /admin usable and show everyone else the setup screen.
if (!config) {
return (
<html lang="en" suppressHydrationWarning>
<body>{isAdminPath(pathname) ? children : <SetupScreen />}</body>
</html>
);
}
const { theme } = config;
const fontsUrl = getGoogleFontsUrl(theme);
const themeVars: Record<string, string> = {
'--accent': theme.accent,
'--accent-dim': `${theme.accent}1f`,
'--font-serif': `'${theme.fonts.heading}', Georgia, 'Times New Roman', serif`,
'--font-sans': `'${theme.fonts.body}', -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif`,
'--font-caption': `'${theme.fonts.caption}', Georgia, serif`,
'--radius-sm': `${theme.radius}px`,
'--radius-md': `${Math.round(theme.radius * 1.5)}px`,
'--radius-lg': `${theme.radius * 2}px`,
};
// /admin stays reachable during setup — it is the tool that completes the
// setup, so the setup screen must not lock it out (#326).
if ((config as AppConfig & { needsSetup?: boolean }).needsSetup && !isAdminPath(pathname)) {
return (
<html lang="en" suppressHydrationWarning>
<body>
<SetupScreen />
</body>
</html>
);
}
const isAdmin = isAdminPath(pathname);
return (
<html
lang={config.lang || 'en'}
suppressHydrationWarning
style={themeVars as React.CSSProperties}
data-preset={theme.preset}
data-grain={String(theme.grain)}
data-header-dot={String(theme.headerDot)}
data-photo-frame={theme.photoFrame}
data-transitions={String(config.transitions)}
>
<head>
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossOrigin="anonymous" />
<link rel="stylesheet" href={fontsUrl} />
</head>
<body>
{isAdmin ? (
children
) : (
<>
<a href="#main-content" className="skip-link">
Skip to content
</a>
<header className="header">
<nav className="header__nav">
<Link href="/" className="header__nav-link">
Home
</Link>
<SubpageNav />
<Link href="/about" className="header__nav-link">
About
</Link>
{config.map && (
<Link href="/map" className="header__nav-link">
Map
</Link>
)}
<ThemeToggle />
</nav>
</header>
<main id="main-content" tabIndex={-1} className="main">
{children}
</main>
<Footer />
<ScrollToTop />
<AssetProtection
disableRightClick={config.protection?.disableRightClick}
disableImageDrag={config.protection?.disableImageDrag}
/>
<AnalyticsTracker />
{process.env.NODE_ENV === 'development' && <DevToolbarLoader />}
</>
)}
</body>
</html>
);
}