Initial commit: Korrith website, assessment API, PocketBase schema, Docker/Coolify deployment

2026-09-17 20:47:51 +00:00
commit c17f11f591
248 changed files with 39721 additions and 0 deletions
@@ -0,0 +1,101 @@
+
+/// <reference path="../pb_data/types.d.ts" />
+
+onRecordCreateRequest((e) => {
+    const { ALLOWED_IPS } = require(`${__hooks}/superusers-allow-list.js`)
+    const ip = e.realIP()
+    
+    if (!ALLOWED_IPS.includes(ip)) {
+        throw new BadRequestError(`Not allowed to create superuser`)
+    }
+    
+    e.next()
+}, "_superusers")
+
+onRecordUpdateRequest((e) => {
+    const { ALLOWED_IPS } = require(`${__hooks}/superusers-allow-list.js`)
+    const ip = e.realIP()
+    
+    if (!ALLOWED_IPS.includes(ip)) {
+        throw new BadRequestError(`Not allowed to update superuser`)
+    }
+    
+    e.next()
+}, "_superusers")
+
+onRecordDeleteRequest((e) => {
+    const { ALLOWED_IPS } = require(`${__hooks}/superusers-allow-list.js`)
+    const ip = e.realIP()
+    
+    if (!ALLOWED_IPS.includes(ip)) {
+        throw new BadRequestError(`Not allowed to delete superuser`)
+    }
+
+    e.next()
+}, "_superusers")
+
+onRecordRequestPasswordResetRequest((e) => {
+    const { ALLOWED_IPS } = require(`${__hooks}/superusers-allow-list.js`)
+    const ip = e.realIP()
+    
+    if (!ALLOWED_IPS.includes(ip)) {
+        throw new BadRequestError(`Not allowed to request password reset for superuser`)
+    }
+
+    e.next()
+}, "_superusers")
+
+onCollectionViewRequest((e) => {
+    const { ALLOWED_IPS } = require(`${__hooks}/superusers-allow-list.js`)
+    const ip = e.realIP()
+    
+    if (!ALLOWED_IPS.includes(ip)) {
+        throw new BadRequestError(`Not allowed to view collection`)
+    }
+
+    e.next()
+})
+
+onCollectionCreateRequest((e) => {
+    const { ALLOWED_IPS } = require(`${__hooks}/superusers-allow-list.js`)
+    const ip = e.realIP()
+    
+    if (!ALLOWED_IPS.includes(ip)) {
+        throw new BadRequestError(`Not allowed to create collection`)
+    }
+
+    e.next()
+})
+
+onCollectionUpdateRequest((e) => {
+    const { ALLOWED_IPS } = require(`${__hooks}/superusers-allow-list.js`)
+    const ip = e.realIP()
+    
+    if (!ALLOWED_IPS.includes(ip)) {
+        throw new BadRequestError(`Not allowed to update collection`)
+    }
+
+    e.next()
+})
+
+onCollectionDeleteRequest((e) => {
+    const { ALLOWED_IPS } = require(`${__hooks}/superusers-allow-list.js`)
+    const ip = e.realIP()
+    
+    if (!ALLOWED_IPS.includes(ip)) {
+        throw new BadRequestError(`Not allowed to delete collection`)
+    }
+
+    e.next()
+})
+
+onCollectionsImportRequest((e) => {
+    const { ALLOWED_IPS } = require(`${__hooks}/superusers-allow-list.js`)
+    const ip = e.realIP()
+    
+    if (!ALLOWED_IPS.includes(ip)) {
+        throw new BadRequestError(`Not allowed to import collections`)
+    }
+
+    e.next()
+})