Hệ thống & kiến trúc

Stack, secret, pipeline Drive ZIP, ranh giới an toàn.

Tech stack đã chọn

  • Frontend + BFF: Astro 7 + Cloudflare Workers (cùng họ teachai.vn)
  • DB: Cloudflare D1 (SQLite) — schema trong db/schema.sql
  • Session: Cookie HMAC + KV SESSION
  • Jobs nặng (Drive download/zip/upload): VPS/Python hoặc Node queue (không chạy 20TB trên Workers)
  • Public API: /api/public/resources, /api/public/track

Secrets cần set

cd teachai-admin
npx wrangler secret put ADMIN_PASSWORD
npx wrangler secret put AUTH_SECRET
# optional later:
# npx wrangler secret put GOOGLE_SERVICE_ACCOUNT_JSON
npm run db:migrate
npm run deploy

Pipeline ZIP (VPS — phase 2)

  1. Service Account Drive: list/index file → POST metadata vào Admin API (hoặc ghi D1 qua worker).
  2. Job queue: download file → zip + password → chèn Huong_dan_lay_mat_khau.txt.
  3. Upload ZIP vào folder public → lấy direct link → mark-zip-ready trên Admin.
  4. teachai.vn/tai-lieu đọc catalog public + track download.

Logged in as

admin@teachai.vn

SITE_URL: https://admin.teachai.vn