AI Edutainment Course Portal

Private Next.js App Router site for the Schloss Elmau five-day AI course.

Stack

• Next.js App Router with TypeScript
• CSS Modules and global TUM.ai design tokens
• Supabase Auth, Postgres, private Storage, and RLS
• Vitest, React Testing Library, and Playwright
• Vercel deployment target

Local Setup

Install dependencies:

pnpm install

Create .env.local from .env.example and fill the values locally. Do not commit real secrets.

Required values:

NEXT_PUBLIC_SUPABASE_URL=
NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY=
SUPABASE_SECRET_KEY=
NEXT_PUBLIC_SITE_URL=http://localhost:3000
LANGDOCK_QR_SIGNING_SECRET=

Legacy Supabase projects may use SUPABASE_SERVICE_ROLE_KEY instead of SUPABASE_SECRET_KEY.

LANGDOCK_QR_SIGNING_SECRET signs the Langdock/Lovable QR scan tokens. Generate it with openssl rand -base64 48. Rotating it invalidates all previously printed QR codes — reprint them from the admin QR pages afterwards.

Supabase

Create a Supabase project, then run:

pnpm supabase:migration
pnpm supabase:test

The migration creates:

• accounts
• day_uploads
• private participant-uploads bucket
• RLS policies for admin and participant access

Configure Supabase Auth redirect URLs:

• http://localhost:3000
• Vercel preview URL when available
• production URL when available

First Admin

After .env.local is configured, create or update the first admin:

pnpm seed:admin

By default, this creates the username admin and prints a generated password. To choose your own credentials, set ADMIN_USERNAME, ADMIN_DISPLAY_NAME, and ADMIN_PASSWORD before running the command. When ADMIN_PASSWORD is provided, the script does not print it.

Checks

pnpm lint
pnpm typecheck
pnpm test
pnpm test:e2e
pnpm build

E2E tests start the local Next.js dev server automatically.

CI runs lint, typecheck, test, build, and E2E on every PR and on push to main, plus CodeQL, dependency review, and a Supabase migration reset check for supabase/** changes. Pull request titles must follow Conventional Commits.