Test/tests

.devcontainer/devcontainer.json

@@ -4,6 +4,15 @@
     "name": "Node.js",
     "image": "mcr.microsoft.com/devcontainers/javascript-node:22-bookworm",
 
+    // Set *default* container specific settings.json values on container create.
+    "settings": {
+        "terminal.integrated.profiles.linux": {
+            "zsh": {
+                "path": "/usr/bin/zsh"
+            }
+        },
+        "terminal.integrated.defaultProfile.linux": "zsh"
+    },
     // Configure tool-specific properties.
     "customizations": {
         // Configure properties specific to VS Code.
@@ -18,6 +27,7 @@
                 "deepscan.vscode-deepscan",
                 "SonarSource.sonarlint-vscode",
                 "unifiedjs.vscode-mdx",
+                "vivaxy.vscode-conventional-commits",
                 "VASubasRaj.flashpost", // Thunder Client is paywalled in WSL/Codespaces/SSH > 2.30.0
                 "ZihanLi.at-helper"
             ]
@@ -30,15 +40,15 @@
     "portsAttributes": {
         "1200": {
             "label": "app port",
-            "onAutoForward": "notify"
+            "onAutoForward": "ignore"
         },
         "3000": {
             "label": "docs port",
-            "onAutoForward": "notify"
+            "onAutoForward": "ignore"
         }
     },
 
-    "onCreateCommand": "sudo apt-get update && export DEBIAN_FRONTEND=noninteractive && sudo apt-get -y install --no-install-recommends ca-certificates fonts-liberation libasound2 libatk-bridge2.0-0 libatk1.0-0 libatspi2.0-0 libcairo2 libcups2 libdbus-1-3 libexpat1 libgbm1 libglib2.0-0 libnspr4 libnss3 libpango-1.0-0 libx11-6 libxcb1 libxcomposite1 libxdamage1 libxext6 libxfixes3 libxkbcommon0 libxrandr2 wget xdg-utils redis-server default-jre-headless && sudo apt-get autoremove -y && sudo apt-get clean -y && sudo rm -rf /var/lib/apt/lists/*",
+    "onCreateCommand": "curl -fsSL https://pkgs.tailscale.com/stable/ubuntu/focal.noarmor.gpg | sudo tee /usr/share/keyrings/tailscale-archive-keyring.gpg >/dev/null && curl -fsSL https://pkgs.tailscale.com/stable/ubuntu/focal.tailscale-keyring.list | sudo tee /etc/apt/sources.list.d/tailscale.list && sudo apt-get update && export DEBIAN_FRONTEND=noninteractive && sudo apt-get -y install --no-install-recommends ca-certificates fonts-liberation libasound2 libatk-bridge2.0-0 libatk1.0-0 libatspi2.0-0 libcairo2 libcups2 libdbus-1-3 libexpat1 libgbm1 libglib2.0-0 libnspr4 libnss3 libpango-1.0-0 libx11-6 libxcb1 libxcomposite1 libxdamage1 libxext6 libxfixes3 libxkbcommon0 libxrandr2 wget xdg-utils redis-server default-jre-headless tailscale && sudo apt-get autoremove -y && sudo apt-get clean -y && sudo rm -rf /var/lib/apt/lists/*",
 
     "updateContentCommand": "export JAVA_HOME=/usr/lib/jvm/default-java && pnpm config set store-dir ~/.local/share/pnpm/store && pnpm i && pnpm rb",
 
@@ -60,5 +70,9 @@
         "ghcr.io/devcontainers/features/github-cli": {
             "version": "latest"
         }
-    }
+    },
+
+    // https://github.com/tailscale/codespace
+    "runArgs": ["--cap-add=NET_ADMIN", "--cap-add=NET_RAW", "--device=/dev/net/tun"],
+    "postStartCommand": "sudo tailscaled"
 }

.dockerignore

@@ -16,7 +16,7 @@ test
 .codecov.yml
 .dockerignore
 .editorconfig
-.env
+.env*
 .eslint*
 .gitignore
 .gitpod.yml
@@ -42,4 +42,8 @@ vercel.json
 .git/hooks
 
 # rsshub auxiliary files
-lib/routes/**/radar.js
+lib/v2/**/radar.js
+
+#dotenv-vault
+!.env.project
+!.env.vault

.env.vault

@@ -0,0 +1,21 @@
+#/-------------------.env.vault---------------------/
+#/         cloud-agnostic vaulting standard         /
+#/   [how it works](https://dotenv.org/env-vault)   /
+#/--------------------------------------------------/
+DOTENV_VAULT=vlt_1c9b9745b63dc7078cf7263d99deab9599182c49c40cef473c5c8a9acaa8e04f
+
+# development
+DOTENV_VAULT_DEVELOPMENT="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"
+DOTENV_VAULT_DEVELOPMENT_VERSION=1
+
+# ci
+DOTENV_VAULT_CI="Q4v5D8HYVNWUsaD48je4o0uVXojOhpYPnIqrBNKoy3xZ39xj6BYP69l2t+63eEMSQoTuLwmPFvfwy+8T2cTfJwqhU1hWJUu9XuWC9mWVtwHMC0O65bxtJllnk2H+eV7rJH0qnYnVER9ZdUnRMXDlvohF4lfNTxLFIfTa7/cMwFfNneKScckNCQUhhlbYAgIOZl7tfahSAjRtOcGHp8UgmUS5czwMvfwKs6vhzEv6SWXt3wha2T2kwtmz4RjdQDSePKKKUq55slQO37TnBbNaSBkdggNQzY+OXGTmobIYi69xTcyFsVrVRd8b8TvldT3775iotpvQEN8y9KxktfoaL1gb7mhDDKGb/F602pK+vGHKWwe/KHzAMdTWk1zVbm9W9gYBwQY4rjps6s8kcZU1zIwIUA=="
+DOTENV_VAULT_CI_VERSION=1
+
+# staging
+DOTENV_VAULT_STAGING="kHyECEmo3chtYxB1Qvs2eGKMn5K639/abx85KlLi25WixCUlYNVWRJ0zWTQ2LMWHZpmxloc8MbdTmYlymDiDaFllH8qwCemQbw8wywFa7Da8HHVqCfRMeMtv05x/HZKiVrtQBqu12GGEBsItuiPZbq4upVGuB/D8fnBLNoywXP6MuQzf3Dgg9fp99CNtrP9deAs/MMXubOedAHcuu8cvUFkrbrbSo90WsKy6fDXYO6fXhfjYBZSZv6ehTgLLLEoxq7iZOH01CryqEgdVPLUjt+b7oORaLtWbEnuylzMjhbfeXmhBi7eFb/VfPzTUebhTwq+Ndv+oHJRqG9H9pff5Y3QWAkB89B5qmsX2KyS3ySyVURJGa3fq/tPsr/UBRmEDaG3LjDUiNMHedYyx74iwIq10rA=="
+DOTENV_VAULT_STAGING_VERSION=1
+
+# production
+DOTENV_VAULT_PRODUCTION="HTs8uHmTUqKwPgl+FsTWpQl+X+FZQ7178pxlf0YQgs0fdFezFanSQ7opxGt1Hyh+Purkx/6o7oJSub0I7r4uSothC9AJqUQhGCyYQABM8oA/3z1bPRRw0Ye5VjjnYDfxigxaB9VEq69hlhB9tmOYc2AnzLl8HfqzaRs3TrEMP2sQ9gOSkyk9f80C1KXqMvjAwQ5IZc38s+u6alXe1vnC1MrDO/Necu+YnrgPlyKMZDhbtVb9XE8BzwC2f+E3C15iMjFOWjp0mjiKYeaXNAVNkbNFbuumrg4dGOnpwzvZYtHlJrv9iJBdna6qfrj3hJryU1atrFN/+e8r1UkWWySlsusNo/A3mJaao9RfisqVaQMLGcx5FAm7wP9g2pvy1csVWzg/1TuKGW//UKaznvY9RmSvEQ=="
+DOTENV_VAULT_PRODUCTION_VERSION=1

.github/dependabot.yml

@@ -6,6 +6,7 @@ updates:
       interval: daily
       time: '08:00'
     open-pull-requests-limit: 100
+    target-branch: 'deploy'
     labels:
       - dependencies
     ignore:

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,73 @@
+# For most projects, this workflow file will not need changing; you simply need
+# to commit it to your repository.
+#
+# You may wish to alter this file to override the set of languages analyzed,
+# or to provide custom queries or build logic.
+#
+# ******** NOTE ********
+# We have attempted to detect the languages in your repository. Please check
+# the `language` matrix defined below to confirm you have the correct set of
+# supported CodeQL languages.
+#
+name: 'CodeQL'
+
+on:
+  push:
+    branches: [upstream]
+  pull_request:
+
+    # The branches below must be a subset of the branches above
+    branches: [upstream]
+  schedule:
+    - cron: '29 1 * * 3'
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: ['javascript']
+
+        # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
+        # Learn more about CodeQL language support at https://git.io/codeql-language-support
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      # Initializes the CodeQL tools for scanning.
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: ${{ matrix.language }}
+
+          # If you wish to specify custom queries, you can do so here or in a config file.
+          # By default, queries listed here will override any specified in a config file.
+          # Prefix the list here with "+" to use these queries and those in the config file.
+          # queries: ./path/to/local/query, your-org/your-repo/queries@main
+
+      # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
+      # If this step fails, then you should remove it and run the build manually (see below)
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v3
+
+      # ℹ️ Command-line programs to run using the OS shell.
+      # 📚 https://git.io/JvXDl
+
+      # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
+      #    and modify them (or add more) to build your code if your project
+      #    uses a compiled language
+
+      # - run: |
+      #   make bootstrap
+      #   make release
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3

.github/workflows/fly.yml

@@ -0,0 +1,14 @@
+name: Fly Deploy
+
+on: [push, workflow_dispatch]
+
+jobs:
+  deploy:
+    name: Deploy app
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: superfly/flyctl-actions/setup-flyctl@master
+      - run: flyctl deploy --remote-only
+        env:
+          FLY_API_TOKEN: ${{ secrets.FLY_API_TOKEN }}

.github/workflows/merge-dependabot.yml

@@ -0,0 +1,44 @@
+name: Automatic merge Dependabot
+on: pull_request
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        node: ['18', '20']
+    services:
+      redis:
+        image: redis
+        ports:
+          - 6379/tcp
+        options: --entrypoint redis-server
+
+    steps:
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v2
+        with:
+          version: 8
+      - uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node }}
+          cache: 'pnpm'
+      - run: pnpm i
+      - run: npm run jest
+        env:
+          REDIS_URL: redis://localhost:${{ job.services.redis.ports[6379] }}/
+      - run: npm run docs:build
+
+  automerge:
+    needs: build
+    runs-on: ubuntu-latest
+
+    permissions:
+      pull-requests: write
+      contents: write
+
+    steps:
+      - uses: fastify/github-action-merge-dependabot@v3
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          target: minor

.github/workflows/merge-upstream.yml

@@ -0,0 +1,58 @@
+name: Auto Merge Upstream
+on:
+  push:
+    branches: ['master', 'upstream']
+  schedule:
+    - cron: '36 2 * * *'
+  workflow_dispatch: ~
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Set GitHub Actions git info
+        run: |
+          git config --global user.name 'github-actions[bot]'
+          git config --global user.email '41898282+github-actions[bot]@users.noreply.github.com'
+
+      - name: Merge upstream
+        id: merge-upstream
+        run: |
+          git config pull.rebase false
+          git remote add DIYgod $GITHUB_SERVER_URL/DIYgod/RSSHub
+          git checkout upstream
+          git fetch DIYgod master
+          git merge DIYgod/master origin/upstream --no-edit
+
+      - name: Push changes
+        uses: ad-m/github-push-action@master
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          branch: upstream
+
+      - name: Merge railway
+        id: merge-railway
+        run: |
+          git checkout deploy
+          git merge DIYgod/master origin/deploy --no-edit
+
+      - name: Push changes
+        uses: ad-m/github-push-action@master
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          branch: deploy
+
+      - name: Merge master
+        id: merge-master
+        run: |
+          git checkout master
+          git merge DIYgod/master origin/master --no-edit
+
+      - name: Push changes
+        uses: ad-m/github-push-action@master
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          branch: ${{ github.ref }}

.gitignore

@@ -30,3 +30,6 @@ package-lock.json
 # pnpm-lock.yaml
 yarn.lock
 yarn-error.log
+
+!.env.project
+!.env.vault

.gitpod.yml

@@ -1,10 +1,12 @@
 image: gitpod/workspace-node-lts
 
 ports:
-  - port: 1200
+  - name: app
+    port: 1200
     onOpen: notify
     visibility: public
-  - port: 3000
+  - name: docs
+    port: 3000
     onOpen: notify
     visibility: public
 
@@ -23,16 +25,41 @@ tasks:
   #     cd website
   #     pnpm run start
   #   openMode: tab-after
+  - name: Restore Tailscale daemon
+    command: |
+      if [ -n "${TS_STATE_TAILSCALE}" ]; then
+        # restore the tailscale state from gitpod user's env vars
+        sudo mkdir -p /var/lib/tailscale
+        echo "${TS_STATE_TAILSCALE}" | sudo tee /var/lib/tailscale/tailscaled.state > /dev/null
+      fi
+      sudo tailscaled
+  - name: Connect to Tailscale
+    command: |
+      if [ -n "${TS_STATE_TAILSCALE}" ]; then
+        sudo -E tailscale up --hostname "gitpod-${GITPOD_GIT_USER_NAME}-$(echo ${GITPOD_WORKSPACE_CONTEXT} | jq -r .repository.name)" --authkey $TAILSCALE_AUTHKEY --accept-routes
+      else
+        sudo -E tailscale up --hostname "gitpod-${GITPOD_GIT_USER_NAME}-$(echo ${GITPOD_WORKSPACE_CONTEXT} | jq -r .repository.name)" --authkey $TAILSCALE_AUTHKEY --accept-routes
+        # store the tailscale state into gitpod user
+        gp env TS_STATE_TAILSCALE="$(sudo cat /var/lib/tailscale/tailscaled.state)"
+      fi
+      exit
 
 vscode:
   extensions:
-    - cweijan.vscode-database-client2 # you may need to rollback to v5.3.1 or below in **VS Code Desktop**
+    # - [email protected] # you may need to rollback to v5.3.1 or below in **VS Code Desktop**
+    - cweijan.vscode-database-client2 # It no longer blocks gitpod
+    - DavidAnson.vscode-markdownlint
     - dbaeumer.vscode-eslint
     - eamodio.gitlens
     - EditorConfig.EditorConfig
     - esbenp.prettier-vscode
     - deepscan.vscode-deepscan
+    - foxundermoon.shell-format
+    - octref.vetur
     - sonarsource.sonarlint-vscode
     # - VASubasRaj.flashpost not available on Open VSX, Thunder Client is paywalled in WSL/Codespaces/SSH > 2.30.0
     - unifiedjs.vscode-mdx
+    - vivaxy.vscode-conventional-commits
+    - WakaTime.vscode-wakatime
+    - yzhang.markdown-all-in-one
     # - ZihanLi.at-helper not available on Open VSX