feat: comprehensive UI overhaul, security hardening, docs, and deployment

.github/workflows/docker-publish.yml

@@ -9,6 +9,7 @@ on:
 env:
   REGISTRY: docker.io
   IMAGE_NAME: opencodehub/opencodehub
+  ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: "true"
 
 jobs:
   build-and-push:
@@ -84,5 +85,5 @@ jobs:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_TOKEN }}
           repository: ${{ env.IMAGE_NAME }}
-          readme-filepath: ./README.md
-          short-description: "A modern, self-hosted Git platform with stacked PRs, merge queue, CI/CD, and AI review."
+          readme-filepath: ./DOCKERHUB.md
+          short-description: "Self-hosted Git platform with stacked PRs, merge queue, CI/CD, and AI code review"

.mimocode/.cron-lock

@@ -1 +1 @@
-{"pid":4029,"startedAt":1784090173838}
+{"pid":5727,"startedAt":1784185065125}

DOCKERHUB.md

@@ -0,0 +1,81 @@
+# OpenCodeHub
+
+![OpenCodeHub](https://raw.githubusercontent.com/swadhinbiswas/OpencodeHub/main/public/logo-light.png)
+
+**The self-hosted Git platform that doesn't compromise.**
+
+OpenCodeHub is a self-hosted Git platform with stacked PRs, merge queue, CI/CD pipelines, and AI code review. One platform for everything your team needs — no vendor lock-in, no per-seat pricing.
+
+---
+
+## Features
+
+- **Stacked PRs** — Graphite-style stacked branches for incremental review
+- **Merge Queue** — Stack-aware merge ordering with speculative CI builds
+- **CI/CD Pipelines** — GitHub Actions-compatible workflows with Docker runners
+- **AI Code Review** — 10+ providers: GPT-4, Claude, Gemini, Groq, Ollama
+- **Git Hosting** — HTTP smart protocol + SSH push/pull, forks, mirroring, LFS
+- **Issues & Projects** — Labels, milestones, custom fields, kanban boards
+- **175+ API Endpoints** — REST + GraphQL for full programmatic access
+- **CLI** — `och` command line tool for stack workflows and repository management
+
+---
+
+## Quick Start
+
+```bash
+# Pull and run
+docker run -d \
+  --name opencodehub \
+  -p 4321:4321 \
+  -v opencodehub-data:/data \
+  -e JWT_SECRET=$(openssl rand -hex 32) \
+  -e SESSION_SECRET=$(openssl rand -hex 32) \
+  -e DATABASE_URL=postgresql://user:pass@db:5432/opencodehub \
+  opencodehub/opencodehub:latest
+```
+
+Or with Docker Compose:
+
+```bash
+git clone https://github.com/swadhinbiswas/OpencodeHub.git
+cd OpenCodeHub
+cp .env.example .env
+docker compose up -d
+docker compose exec app bun run scripts/seed-admin.ts
+```
+
+Open **http://localhost:4321** and create your admin account.
+
+---
+
+## Environment Variables
+
+| Variable | Required | Description |
+|----------|----------|-------------|
+| `DATABASE_URL` | Yes | PostgreSQL connection string |
+| `JWT_SECRET` | Yes | Random 32+ char string for JWT signing |
+| `SESSION_SECRET` | Yes | Random 32+ char string for session encryption |
+| `REDIS_URL` | Yes | Redis connection string |
+| `SITE_URL` | Yes | Your public URL (e.g., `https://git.example.com`) |
+| `STORAGE_TYPE` | No | `local` (default) or `s3` |
+
+---
+
+## Documentation
+
+Full documentation: **[docs.opencodehub.space](https://docs.opencodehub.space)**
+
+- [Installation Guide](https://docs.opencodehub.space/getting-started/installation/)
+- [Configuration Reference](https://docs.opencodehub.space/administration/configuration/)
+- [Deployment Options](https://docs.opencodehub.space/administration/deployment/)
+- [CLI Reference](https://docs.opencodehub.space/reference/cli-commands/)
+- [API Reference](https://docs.opencodehub.space/api/rest-api/)
+
+---
+
+## Links
+
+- **GitHub**: [github.com/swadhinbiswas/OpencodeHub](https://github.com/swadhinbiswas/OpencodeHub)
+- **Documentation**: [docs.opencodehub.space](https://docs.opencodehub.space)
+- **License**: MIT

Dockerfile

@@ -12,7 +12,7 @@ RUN apt-get update && apt-get install -y python3 make g++ gcc libc6-dev && rm -r
 COPY package.json bun.lock ./
 COPY cli/package.json ./cli/package.json
 RUN for i in 1 2 3; do \
-      bun install --frozen-lockfile && break || \
+      bun install --frozen-lockfile --production && break || \
       (echo "bun install attempt $i failed, retrying in 10s..." && sleep 10); \
     done
 
@@ -24,19 +24,20 @@ ENV SKIP_REDIS_CHECK=1
 RUN bun run build
 
 # Production image
-FROM oven/bun:1 AS runner
+FROM oven/bun:1-slim AS runner
 WORKDIR /app
 
 # Install git, ssh, and bash (needed for git operations and entrypoint)
-RUN apt-get update && apt-get install -y git openssh-client bash && rm -rf /var/lib/apt/lists/*
+RUN apt-get update && apt-get install -y --no-install-recommends git openssh-client bash && \
+    rm -rf /var/lib/apt/lists/*
 
 # Create data directories
-RUN mkdir -p /data/repos /data/storage /data/cache /data/ssh && \
+RUN mkdir -p /data/repositories /data/storage /data/cache /data/ssh && \
     chown -R bun:bun /data
 
-# Copy built application
+# Copy only what's needed for runtime
 COPY --from=builder --chown=bun:bun /app/dist ./dist
-COPY --from=builder --chown=bun:bun /app/node_modules ./node_modules
+COPY --from=deps --chown=bun:bun /app/node_modules ./node_modules
 COPY --from=builder --chown=bun:bun /app/package.json ./
 
 # Copy drizzle config and schema for migrations
@@ -51,7 +52,7 @@ COPY --chown=bun:bun docker-entrypoint.sh ./
 ENV HOST=0.0.0.0
 ENV PORT=4321
 ENV DATA_DIR=/data
-ENV REPOS_PATH=/data/repos
+ENV GIT_REPOS_PATH=/data/repositories
 ENV STORAGE_PATH=/data/storage
 ENV CACHE_PATH=/data/cache
 ENV SSH_PATH=/data/ssh