feat(backend): pocketbase authHEADmain

2 files changed, 102 insertions, 0 deletions

diff --git a/docker/demo-backend/index.html b/docker/demo-backend/index.html
new file mode 100644
index 0000000..f7cc702
--- /dev/null
+++ b/docker/demo-backend/index.html
@@ -0,0 +1,86 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Protected Backend</title>
+    <style>
+        :root {
+            color-scheme: light;
+            --bg: #f4efe6;
+            --card: #fffaf2;
+            --ink: #1e1b18;
+            --accent: #c95f27;
+            --line: #d9c7ae;
+        }
+
+        * {
+            box-sizing: border-box;
+        }
+
+        body {
+            margin: 0;
+            min-height: 100vh;
+            font-family: Georgia, "Times New Roman", serif;
+            color: var(--ink);
+            background:
+                radial-gradient(circle at top left, rgba(201, 95, 39, 0.18), transparent 28rem),
+                linear-gradient(180deg, #f8f2e8 0%, var(--bg) 100%);
+            display: grid;
+            place-items: center;
+            padding: 24px;
+        }
+
+        main {
+            width: min(760px, 100%);
+            background: var(--card);
+            border: 1px solid var(--line);
+            border-radius: 20px;
+            padding: 32px;
+            box-shadow: 0 20px 60px rgba(79, 53, 24, 0.12);
+        }
+
+        h1 {
+            margin: 0 0 16px;
+            font-size: clamp(2rem, 4vw, 3.5rem);
+            line-height: 0.95;
+        }
+
+        p {
+            font-size: 1.1rem;
+            line-height: 1.7;
+        }
+
+        code {
+            background: rgba(201, 95, 39, 0.09);
+            padding: 0.15em 0.4em;
+            border-radius: 6px;
+        }
+
+        .badge {
+            display: inline-block;
+            margin-bottom: 14px;
+            padding: 6px 10px;
+            border-radius: 999px;
+            background: #2f5d50;
+            color: #f7f3eb;
+            font-size: 0.78rem;
+            letter-spacing: 0.08em;
+            text-transform: uppercase;
+        }
+    </style>
+</head>
+<body>
+    <main>
+        <div class="badge">Protected Target</div>
+        <h1>Backend reached through the auth proxy</h1>
+        <p>
+            If you can see this page through <code>http://localhost:8080/</code>, the reverse proxy,
+            PocketBase-backed auth flow, and demo backend are all wired correctly.
+        </p>
+        <p>
+            Default login for the seeded proxy admin user: <code>admin</code> / <code>password123</code>.
+        </p>
+    </main>
+</body>
+</html>
diff --git a/docker/pocketbase/Dockerfile b/docker/pocketbase/Dockerfile
new file mode 100644
index 0000000..86fdf77
--- /dev/null
+++ b/docker/pocketbase/Dockerfile
@@ -0,0 +1,16 @@
+FROM alpine:3.22
+
+ARG PB_VERSION=0.36.9
+
+RUN apk add --no-cache ca-certificates unzip wget
+
+WORKDIR /pb
+
+ADD https://github.com/pocketbase/pocketbase/releases/download/v${PB_VERSION}/pocketbase_${PB_VERSION}_linux_amd64.zip /tmp/pocketbase.zip
+RUN unzip /tmp/pocketbase.zip -d /pb && rm /tmp/pocketbase.zip && chmod +x /pb/pocketbase
+
+COPY pb_migrations /pb/pb_migrations
+
+EXPOSE 8090
+
+CMD ["/pb/pocketbase", "serve", "--http=0.0.0.0:8090", "--dir=/pb/pb_data"]