Personal Website

Next.js (App Router) app that powers mathislambert.fr. The site, API routes (chat proxy, resume export, admin analytics), and Mongo-backed content all live in this single service, packaged for Docker and deployed behind Traefik.

Features

• Public pages for projects, articles, experiences, studies, and a downloadable resume.
• Chat assistant UI that calls /api/agent, proxying to ML_API_BASE_URL with SSE.
• Mandatory API analytics wrapper (withApiAnalytics) on all API routes except /api/health and NextAuth, with redacted structured logs in MongoDB.
• Dedicated chat transcript observability for /api/agent with a turns-only source (chat_conversation_turns) and conversation summaries aggregated at read time (redacted input/output).
• Credentials-protected admin area at /admin with granular observability (overview, timeseries, endpoint latency, error stream, activity feed).
• Discussion explorer at /admin/discussions for transcript-level inspection and moderation.
• UI analytics ingestion endpoint at /api/analytics/track (page views + key interactions).
• Resume export at /api/resume/export; /api/health pings Mongo connectivity.
• Tailwind v4 + Radix UI + framer-motion components, with Google Maps embed gated by NEXT_PUBLIC_MAPS_PUBLIC_KEY.

Stack and layout

• Next.js 16 / React 19 / TypeScript with standalone output.
• MongoDB for content, analytics logs (api_request_logs, ui_events), and chat transcript monitoring (chat_conversation_turns).
• Docker multi-stage build (Dockerfile) producing a single runtime image.
• Compose files: development/docker-compose.yml (local dev with Mongo), compose.dev.yaml (local prod build), compose.prod.yaml (server deploy with Traefik labels).
• GitHub Actions .github/workflows/cd.yaml builds/pushes ghcr.io/<owner>/personal-website on tags and redeploys to the Raspberry Pi host.

Environment

• Copy .env.example to .env for local/dev/prod compose and local Node runs.
• Set NEXT_PUBLIC_MAPS_PUBLIC_KEY, NEXT_PUBLIC_APP_VERSION, and NEXT_PUBLIC_MAINTENANCE_MODE before building images (they are baked into the client).
• Provide runtime secrets: PUBLIC_BASE_URL, ML_API_BASE_URL, ML_API_KEY, LLM_MODEL_NAME, ML_API_VECTOR_STORE_ID, NEXTAUTH_SECRET, ADMIN_USERNAME/ADMIN_PASSWORD (or INTERNAL_API_*), MONGODB_URI/MONGODB_DB, and ANALYTICS_HASH_SALT.
• Optional retention tuning: ANALYTICS_LOG_RETENTION_DAYS, CHAT_LOG_RETENTION_DAYS.
• Optional transcript truncation tuning: CHAT_LOG_MAX_TEXT_CHARS.
• NEXTAUTH_URL should point at the external URL in production when using NextAuth callbacks.

Run locally

• Node: cd src && npm ci && npm run dev (expects Mongo reachable at MONGODB_URI, defaults to mongodb://localhost:27017/personal_website).
• Route instrumentation check: cd src && npm run check:api-analytics.
• Docker with live reload + Mongo: docker compose -f development/docker-compose.yml up --build (bind-mounts src/ into the dev container).
• Prod-like image locally: docker compose -f compose.dev.yaml up --build (reads build args from .env).

Deploy

• Runtime container listens on 3000; Traefik labels and external networks are defined in compose.prod.yaml.
• Tag a commit (v*) → GitHub Actions builds the arm64 image, pushes to GHCR, then SSH deploys via docker compose -f compose.prod.yaml up -d on the server with secrets/vars for all env values.
• Manual deploy: set OWNER and IMAGE_TAG, export the needed env vars, then run docker compose -f compose.prod.yaml up -d on the host.

API surface

• GET /api/health — database health check.
• POST /api/agent — agentic Responses API proxy (SSE supported).
• GET /api/resume/export — latest resume PDF export.
• POST /api/analytics/track — ingest UI analytics events.
• /api/auth/[...nextauth] — credentials login for /admin.
• /api/admin/* — protected CRUD + analytics endpoints:
• /api/admin/analytics/overview
• /api/admin/analytics/timeseries
• /api/admin/analytics/endpoints
• /api/admin/analytics/errors
• /api/admin/analytics/activity
• /api/admin/analytics/conversations
• /api/admin/analytics/conversations/:conversationId
• /api/admin/analytics/conversations/:conversationId/turns

License

MIT — see LICENSE.