tracker: single-binary project tracker with auth, api keys, and json api

Go + SQLite web app, server-rendered, hackerman theme. Projects with descriptions, searchable notes, todo/doing/done task tracking. Bcrypt login sessions, hashed api keys, full /api/v1 crud. Deploys on straylight via configs/tracker.nix (prebuilt binary).
2026-09-18 21:28:40 -07:00
commit c9e74b236d
20 changed files with 2489 additions and 0 deletions
@@ -0,0 +1,108 @@
+package main
+
+import (
+	"errors"
+	"flag"
+	"fmt"
+	"log"
+	"net/http"
+	"os"
+	"path/filepath"
+	"strings"
+
+	"golang.org/x/crypto/bcrypt"
+	"golang.org/x/term"
+
+	"tracker/internal/server"
+	"tracker/internal/store"
+)
+
+func main() {
+	defaultDB := filepath.Join(os.Getenv("HOME"), ".local", "share", "tracker", "tracker.db")
+	dbPath := flag.String("db", defaultDB, "sqlite database path")
+	addr := flag.String("addr", ":8420", "listen address")
+	addUser := flag.String("adduser", "", "create a login user, then exit")
+	flag.Parse()
+
+	if err := os.MkdirAll(filepath.Dir(*dbPath), 0o755); err != nil {
+		log.Fatal(err)
+	}
+
+	if *addUser != "" {
+		if err := runAddUser(*dbPath, *addUser); err != nil {
+			log.Fatal(err)
+		}
+		return
+	}
+
+	st, err := store.Open(*dbPath)
+	if err != nil {
+		log.Fatal(err)
+	}
+	defer st.Close()
+
+	srv, err := server.New(st)
+	if err != nil {
+		log.Fatal(err)
+	}
+
+	log.Printf("tracker online :: listening on %s", *addr)
+	if err := http.ListenAndServe(*addr, srv.Routes()); err != nil {
+		log.Fatal(err)
+	}
+}
+
+func runAddUser(dbPath, username string) error {
+	username = strings.TrimSpace(username)
+	if username == "" {
+		return errors.New("username cannot be empty")
+	}
+	if strings.ContainsAny(username, " \t") {
+		return errors.New("username cannot contain whitespace")
+	}
+
+	password := os.Getenv("TRACKER_PASSWORD")
+	confirm := password
+	if password == "" {
+		fmt.Print("passphrase: ")
+		pw, err := term.ReadPassword(int(os.Stdin.Fd()))
+		fmt.Println()
+		if err != nil {
+			return err
+		}
+		fmt.Print("confirm: ")
+		confirmPw, err := term.ReadPassword(int(os.Stdin.Fd()))
+		fmt.Println()
+		if err != nil {
+			return err
+		}
+		password, confirm = string(pw), string(confirmPw)
+	}
+
+	if len(password) < 8 {
+		return errors.New("passphrase must be at least 8 characters")
+	}
+	if password != confirm {
+		return errors.New("passphrases do not match")
+	}
+
+	hash, err := bcrypt.GenerateFromPassword([]byte(password), bcrypt.DefaultCost)
+	if err != nil {
+		return err
+	}
+
+	st, err := store.Open(dbPath)
+	if err != nil {
+		return err
+	}
+	defer st.Close()
+
+	if _, err := st.CreateUser(username, string(hash)); err != nil {
+		if errors.Is(err, store.ErrConflict) {
+			return fmt.Errorf("user %q already exists", username)
+		}
+		return err
+	}
+	fmt.Printf("user %q created. log in at /login\n", username)
+	return nil
+}