feat: onboarding trial flow, Google sign-in, dark mode hotspot fixes

- Move trial creation from auth hook to dedicated /subscriptions/trial endpoint
  with eligibility checks (3-day Full Paket trial)
- Add animated onboarding progress (Remotion) with confetti on completion
- Register redirects to subscription page with welcome flow
- Add Google social login/signup support with config injection
- Improve hotspot overlay visibility in dark mode
- Show "Panele Git" on landing page when authenticated
- Turkish translations for API error messages
- Add toast utility wrapper, UUID generation for auth IDs

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Sase Dev
2026-02-15 14:53:57 +00:00
parent a5ee147675
commit 87d8eea298
50 changed files with 1116 additions and 298 deletions

View File

@@ -0,0 +1,73 @@
server {
server_name sase.tr;
# Security headers
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-XSS-Protection "1; mode=block" always;
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
# Block sensitive paths
location ~ /\.(git|env) {
deny all;
return 404;
}
location ~ ^/(node_modules)/ {
deny all;
return 404;
}
# Gzip compression
gzip on;
gzip_vary on;
gzip_proxied any;
gzip_comp_level 6;
gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript image/svg+xml;
root /home/s/ss/apps/web/dist;
index index.html;
# Proxy API requests to NestJS backend
location /api/ {
proxy_pass http://127.0.0.1:4000;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_connect_timeout 60s;
proxy_send_timeout 60s;
proxy_read_timeout 60s;
}
# Static assets with long cache
location /assets/ {
expires 1y;
add_header Cache-Control "public, immutable" always;
try_files $uri =404;
}
# SPA fallback — all routes resolve to index.html
location / {
try_files $uri $uri/ /index.html;
}
listen 443 ssl;
ssl_certificate /etc/letsencrypt/live/sase.tr/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/sase.tr/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
}
server {
if ($host = sase.tr) {
return 301 https://$host$request_uri;
} # managed by Certbot
listen 80;
server_name sase.tr;
return 301 https://$host$request_uri;
}

View File

@@ -19,12 +19,12 @@ server {
add_header Cache-Control "public, max-age=31536000, immutable" always;
# CORS
add_header Access-Control-Allow-Origin "https://v2.sase.tr" always;
add_header Access-Control-Allow-Origin "https://sase.tr" always;
add_header Access-Control-Allow-Methods "GET, HEAD, OPTIONS" always;
add_header Access-Control-Allow-Headers "Range, Content-Type" always;
if ($request_method = 'OPTIONS') {
add_header Access-Control-Allow-Origin "https://v2.sase.tr";
add_header Access-Control-Allow-Origin "https://sase.tr";
add_header Access-Control-Allow-Methods "GET, HEAD, OPTIONS";
add_header Access-Control-Allow-Headers "Range, Content-Type";
add_header Access-Control-Max-Age 86400;

View File

@@ -1,73 +1,15 @@
server {
server_name v2.sase.tr;
return 301 https://sase.tr$request_uri;
# Security headers
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-XSS-Protection "1; mode=block" always;
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
# Block sensitive paths
location ~ /\.(git|env) {
deny all;
return 404;
}
location ~ ^/(node_modules)/ {
deny all;
return 404;
}
# Gzip compression
gzip on;
gzip_vary on;
gzip_proxied any;
gzip_comp_level 6;
gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript image/svg+xml;
root /home/s/ss/apps/web/dist;
index index.html;
# Proxy API requests to NestJS backend
location /api/ {
proxy_pass http://127.0.0.1:4000;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_connect_timeout 60s;
proxy_send_timeout 60s;
proxy_read_timeout 60s;
}
# Static assets with long cache
location /assets/ {
expires 1y;
add_header Cache-Control "public, immutable" always;
try_files $uri =404;
}
# SPA fallback — all routes resolve to index.html
location / {
try_files $uri $uri/ /index.html;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/v2.sase.tr/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/v2.sase.tr/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
listen 443 ssl;
ssl_certificate /etc/letsencrypt/live/v2.sase.tr/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/v2.sase.tr/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
}
server {
if ($host = v2.sase.tr) {
return 301 https://$host$request_uri;
} # managed by Certbot
listen 80;
server_name v2.sase.tr;
return 404; # managed by Certbot
}
return 301 https://sase.tr$request_uri;
}