┌─────────────────┐     ┌─────────────────┐     ┌─────────────────┐
│  Flutter Web    │────▶│   Go Backend    │────▶│   PostgreSQL    │
│  (b0esche_cloud)│     │   (go_cloud)    │     │                 │
└─────────────────┘     └────────┬────────┘     └─────────────────┘
                                 │
                    ┌────────────┼────────────┐
                    ▼            ▼            ▼
             ┌──────────┐ ┌──────────┐ ┌──────────┐
             │Nextcloud │ │Collabora │ │  Traefik │
             │(Storage) │ │ (Office) │ │ (Proxy)  │
             └──────────┘ └──────────┘ └──────────┘

Project Structure

b0esche_cloud/
├── b0esche_cloud/          # Flutter web frontend
│   ├── lib/
│   │   ├── blocs/          # BLoC state management
│   │   ├── models/         # Data models
│   │   ├── pages/          # UI pages
│   │   ├── repositories/   # Data repositories
│   │   ├── services/       # API services
│   │   ├── theme/          # App theming
│   │   └── widgets/        # Reusable widgets
│   └── web/                # Web assets
├── go_cloud/               # Go backend
│   ├── cmd/api/            # Main entry point
│   ├── internal/
│   │   ├── auth/           # Authentication (OIDC, Passkeys)
│   │   ├── files/          # File management
│   │   ├── org/            # Organization management
│   │   ├── storage/        # Nextcloud/WebDAV integration
│   │   ├── http/           # HTTP handlers & WOPI
│   │   └── ...
│   ├── migrations/         # Database migrations
│   └── pkg/jwt/            # JWT utilities
├── scripts/                # Deployment & operations scripts
└── docs/                   # Documentation
    └── AUTH.md             # Authentication system docs

Features

🔐 Authentication: OIDC via Nextcloud + WebAuthn Passkeys
📁 File Management: Upload, download, organize files
👥 Organizations: Multi-tenant with roles (Owner, Admin, Member)
📝 Document Viewing: PDF viewer, Office document preview
🔄 Real-time Sync: Nextcloud/WebDAV backend storage
🚀 Auto-deployment: Daily 3AM deployments via GitLab webhooks

Prerequisites

Go 1.21+
Flutter 3.10+
Docker & Docker Compose
PostgreSQL 15+

Local Development

Quick Start

# Start everything
./scripts/dev-all.sh

Manual Setup

Backend:

cd go_cloud
cp .env.example .env
# Edit .env with your configuration
go run ./cmd/api

Frontend:

cd b0esche_cloud
flutter pub get
flutter run -d chrome

Configuration

Backend Environment Variables

Variable	Description
`SERVER_ADDR`	Server address (default: `:8080`)
`DATABASE_URL`	PostgreSQL connection string
`JWT_SECRET`	Secret for JWT signing
`OIDC_ISSUER_URL`	OIDC provider URL
`OIDC_CLIENT_ID`	OIDC client ID
`OIDC_CLIENT_SECRET`	OIDC client secret
`NEXTCLOUD_URL`	Nextcloud instance URL
`NEXTCLOUD_USERNAME`	Nextcloud admin username
`NEXTCLOUD_PASSWORD`	Nextcloud admin password
`COLLABORA_URL`	Collabora Online URL

Production Deployment

The project runs on a VPS with Docker containers behind Traefik reverse proxy.

Services & Domains

Domain	Service
`www.b0esche.cloud`	Flutter Web (Nginx)
`go.b0esche.cloud`	Go API Backend
`storage.b0esche.cloud`	Nextcloud (Storage + OIDC)
`of.b0esche.cloud`	Collabora Online (Office)

Server Directory Structure

/opt/
├── traefik/          # Reverse proxy + SSL
├── go/               # Go backend + PostgreSQL
├── flutter/          # Flutter web build + Nginx
├── scripts/          # Operations scripts
└── auto-deploy/      # Auto-deployment workspace

Server Scripts

Script	Description
`auto-deploy.sh`	Daily automated deployment (runs at 3AM)
`deploy-now.sh`	Trigger immediate deployment
`backup.sh`	Full backup (DB, configs, volumes)
`monitor.sh`	Health monitoring & alerts
`webhook-server.py`	GitLab webhook receiver

Deployment Commands

# Trigger immediate deploy
ssh b0esche-cloud '/opt/scripts/deploy-now.sh'

# Check backend logs
ssh b0esche-cloud 'docker logs go-backend -f'

# Check service status
ssh b0esche-cloud 'docker ps --format "table {{.Names}}\t{{.Status}}"'

# Health checks
curl -s https://go.b0esche.cloud/health
curl -s https://www.b0esche.cloud | grep -o '<title>.*</title>'

Starting Services (Manual)

# Start all services in order
ssh b0esche-cloud 'cd /opt/traefik && docker-compose up -d'
ssh b0esche-cloud 'cd /opt/go && docker-compose up -d'
ssh b0esche-cloud 'cd /opt/flutter && docker-compose up -d'

Database Migrations

Migrations are in go_cloud/migrations/:

cd go_cloud
go run github.com/pressly/goose/v3/cmd/goose@latest postgres "$DATABASE_URL" up

Backup & Recovery

Backups run daily and include:

PostgreSQL database dumps
Nextcloud database
Traefik certificates
Docker volumes
Configuration files

Backups are retained for 30 days.

# Manual backup
ssh b0esche-cloud '/opt/scripts/backup.sh'

Testing

# Backend tests
cd go_cloud && go test ./...

# Frontend tests
cd b0esche_cloud && flutter test

Tech Stack

Component	Technology
Frontend	Flutter Web, BLoC
Backend	Go, Chi Router
Database	PostgreSQL
Storage	Nextcloud (WebDAV)
Office	Collabora Online
Auth	OIDC, WebAuthn
Proxy	Traefik
CI/CD	GitLab + Webhooks

Documentation

Document	Description
ARCHITECTURE.md	System architecture, components, data flows
API.md	Complete API endpoint reference
AUTH.md	Authentication system (Passkeys, OIDC, roles)
SECURITY.md	Security architecture, hardening, best practices
DEVELOPMENT.md	Local setup, coding conventions, testing
DEPLOYMENT.md	Production deployment, operations, troubleshooting

License

Languages

Dart 56.2%

Go 34.7%

C++ 3.5%

CMake 2.5%

Shell 1.4%

Other 1.6%