CMLPlatform · simonvanlierde · Oct 17, 2025 · Oct 17, 2025 · Oct 21, 2025 · Oct 21, 2025
diff --git a/.env.example b/.env.example
@@ -9,6 +9,12 @@ TUNNEL_TOKEN=your_token
 # Host directory where database and user upload backups are stored
 BACKUP_DIR=./backups
 
-# Remote backup config (for use of backend/scripts/backup/backup_rclone.sh script)
-BACKUP_REMOTE_HOST=user@host
-BACKUP_REMOTE_PATH=/path/to/remote/backup
+# Remote rsync backup config (for use of backend/scripts/backup/rsync_backup.sh script)
+BACKUP_RSYNC_REMOTE_HOST=user@host
+BACKUP_RSYNC_REMOTE_PATH=/path/to/remote/backup
+
+# Remote rclone backup config (for use of backend/scripts/backup/rclone_backup.sh script)
+BACKUP_RCLONE_REMOTE=myremote:/path/to/remote/backup
+BACKUP_RCLONE_MULTI_THREAD_STREAMS=16
+BACKUP_RCLONE_TIMEOUT=5m
+BACKUP_RCLONE_USE_COOKIES=false
diff --git a/.github/ISSUE_TEMPLATE/bug_report.md b/.github/ISSUE_TEMPLATE/bug_report.md
@@ -1,9 +1,9 @@
 ---
-name: Bug report
 about: Create a report to help us improve
-title: 'bug: '
-labels: bug
 assignees: ''
+labels: bug
+name: Bug report
+title: 'bug: '
 ---
 
 ## Bug description

diff --git a/.github/ISSUE_TEMPLATE/feature-request.md b/.github/ISSUE_TEMPLATE/feature-request.md
@@ -1,9 +1,9 @@
 ---
-name: Feature request
 about: Suggest an idea for this project
-title: 'feature request: '
-labels: feature request
 assignees: ''
+labels: feature request
+name: Feature request
+title: 'feature request: '
 ---
 
 ## Problem statement

diff --git a/.github/ISSUE_TEMPLATE/internal-ticket.md b/.github/ISSUE_TEMPLATE/internal-ticket.md
@@ -1,9 +1,9 @@
 ---
-name: Internal ticket
 about: For internal development
-title: ''
-labels: ''
 assignees: ''
+labels: ''
+name: Internal ticket
+title: ''
 ---
 
 ## Problem

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -5,106 +5,105 @@
 
 repos:
   ### Global hooks
-  - repo: https://gitlab.com/vojko.pribudic.foss/pre-commit-update
-    rev: v0.8.0
+-   repo: https://gitlab.com/vojko.pribudic.foss/pre-commit-update
+    rev: v0.9.0
     hooks:
-      - id: pre-commit-update # Autoupdate pre-commit hooks
+    -   id: pre-commit-update # Autoupdate pre-commit hooks
 
-  - repo: https://github.com/gitleaks/gitleaks
-    rev: v8.28.0
+-   repo: https://github.com/gitleaks/gitleaks
+    rev: v8.30.0
     hooks:
-      - id: gitleaks
+    -   id: gitleaks
 
-  - repo: https://github.com/executablebooks/mdformat
+-   repo: https://github.com/executablebooks/mdformat
     rev: 1.0.0
     hooks:
-      - id: mdformat # Format Markdown files.
+    -   id: mdformat # Format Markdown files.
         additional_dependencies:
-          - mdformat-gfm # Support GitHub Flavored Markdown.
-          - mdformat-footnote
-          - mdformat-frontmatter
-          - mdformat-ruff # Support Python code blocks linted with Ruff.
-          - mdformat-tables # Support GitHub style tables.
+        -   mdformat-gfm>=1.0.0 # Support GitHub Flavored Markdown.
+        -   mdformat-front-matters
+        -   mdformat-ruff # Support Python code blocks linted with Ruff.
 
-  - repo: https://github.com/pre-commit/pre-commit-hooks
+-   repo: https://github.com/pre-commit/pre-commit-hooks
     rev: v6.0.0
     hooks:
-      - id: check-added-large-files
-      - id: check-case-conflict # Check for files with names that differ only in case.
-      - id: check-executables-have-shebangs
-      - id: check-shebang-scripts-are-executable
-      - id: check-toml
-      - id: check-yaml
+    -   id: check-added-large-files
+    -   id: check-case-conflict # Check for files with names that differ only in case.
+    -   id: check-executables-have-shebangs
+    -   id: check-shebang-scripts-are-executable
+    -   id: check-toml
+    -   id: check-yaml
         exclude: ^docs/mkdocs.yml$ # Exclude mkdocs.yml because it uses an obscure tag to allow for mermaid formatting
-      - id: detect-private-key
-      - id: end-of-file-fixer # Ensure files end with a newline.
-      - id: mixed-line-ending
-      - id: no-commit-to-branch # Prevent commits to main and master branches.
-      - id: trailing-whitespace
+    -   id: detect-private-key
+    -   id: end-of-file-fixer # Ensure files end with a newline.
+    -   id: mixed-line-ending
+    -   id: no-commit-to-branch # Prevent commits to main and master branches.
+    -   id: trailing-whitespace
         args: ["--markdown-linebreak-ext", "md"] # Preserve Markdown hard line breaks.
 
-  - repo: https://github.com/commitizen-tools/commitizen
-    rev: v4.9.1
+-   repo: https://github.com/commitizen-tools/commitizen
+    rev: v4.10.0
     hooks:
-      - id: commitizen
+    -   id: commitizen
         stages: [commit-msg]
 
-  - repo: https://github.com/simonvanlierde/check-json5
+-   repo: https://github.com/simonvanlierde/check-json5
     rev: v1.1.0
     hooks:
-      - id: check-json5
+    -   id: check-json5
         files: ^ (?!(backend/frontend-app|frontend-web)/data/)
-        ### Backend hooks
-  - repo: https://github.com/RobertCraigie/pyright-python # Lint backend code with Pyright.
-    rev: v1.1.406
+
+    ### Backend hooks
+-   repo: https://github.com/RobertCraigie/pyright-python # Lint backend code with Pyright.
+    rev: v1.1.407
     hooks:
-      - id: pyright
+    -   id: pyright
         files: ^backend/(app|scripts|tests)/
         entry: pyright --project backend
 
-  - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.14.0
+-   repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.14.6
     hooks:
-      - id: ruff-check # Lint code
+    -   id: ruff-check # Lint code
         files: ^backend/(app|scripts|tests)/
         args: ["--fix", "--config", "backend/pyproject.toml", "--ignore", "FIX002"] # Allow TODO comments in commits.
-      - id: ruff-format # Format code
+    -   id: ruff-format # Format code
         files: ^backend/(app|scripts|tests)/
         args: ["--config", "backend/pyproject.toml"]
 
-  - repo: https://github.com/astral-sh/uv-pre-commit
-    rev: 0.9.3
+-   repo: https://github.com/astral-sh/uv-pre-commit
+    rev: 0.9.13
     hooks:
-      - id: uv-lock # Update the uv lockfile for the backend.
+    -   id: uv-lock # Update the uv lockfile for the backend.
         files: ^backend/(uv\.lock|pyproject\.toml|uv\.toml)$
         entry: uv lock --project backend
 
-  - repo: local
+-   repo: local
     hooks: # Check if Alembic migrations are up-to-date. Uses uv to ensure the right environment when executed through VS Code Git extension.
-      - id: backend-alembic-autogen-check
+    -   id: backend-alembic-autogen-check
         name: check alembic migrations
         entry: bash -c 'cd backend && uv run alembic-autogen-check'
         language: system
         files: ^(backend/(app|alembic)/|alembic\.ini$)
         pass_filenames: false
         stages: [pre-commit]
 
-        ### Frontend hooks
-  - repo: local
+    ### Frontend hooks
+-   repo: local
     hooks:
-      - id: frontend-web-lint
-        name: lint frontend-web code
-        entry: bash -c 'cd frontend-web && npm run lint'
-        language:
-          system
-          # Match frontend JavaScript and TypeScript files for linting.
-        files: ^frontend-web\/.*\.(jsx?|tsx?|c(js|ts)|m(js|ts)|d\\.(ts|cts|mts)|jsonc?)$
+    -   id: frontend-web-format
+        name: format frontend-web code
+        entry: bash -c 'cd frontend-web && npm run format'
+        language: system
+          # Match frontend JavaScript and TypeScript files for formatting.
+        files:
+          ^frontend-web\/.*\.(jsx?|tsx?|c(js|ts)|m(js|ts)|d\\.(ts|cts|mts)|jsonc?)$
         pass_filenames: false
-      - id: frontend-app-lint
-        name: lint frontend-app code
-        entry: bash -c 'cd frontend-app && npm run lint'
-        language:
-          system
-          # Match frontend JavaScript and TypeScript files for linting.
-        files: ^frontend-app\/.*\.(jsx?|tsx?|c(js|ts)|m(js|ts)|d\\.(ts|cts|mts)|jsonc?)$
+    -   id: frontend-app-format
+        name: format frontend-app code
+        entry: bash -c 'cd frontend-app && npm run format'
+        language: system
+          # Match frontend JavaScript and TypeScript files for formatting.
+        files:
+          ^frontend-app\/.*\.(jsx?|tsx?|c(js|ts)|m(js|ts)|d\\.(ts|cts|mts)|jsonc?)$
         pass_filenames: false
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -20,6 +20,7 @@ Thank you for your interest in contributing to the Reverse Engineering Lab proje
     - [Backend Code Style](#backend-code-style)
     - [Backend Testing](#backend-testing)
     - [Database Migrations](#database-migrations)
+    - [Email templates](#email-templates)
   - [Frontend Development](#frontend-development)
     - [Frontend Code Style](#frontend-code-style)
     - [Frontend Testing](#frontend-testing)
@@ -172,10 +173,7 @@ It is still recommended to use VS Code as your IDE, as we have provided some rec
 
    The API is now available at <http://127.0.0.1:8000>.
 
-   You can log in with the superuser details specified in the `.env` file. This gives you access to:
-
-   - Interactive API documentation at <http://127.0.0.1:8000/swagger/full>
-   - Admin panel for database management at <http://127.0.0.1:8000/dashboard>
+   You can log in with the superuser details specified in the `.env` file. This gives you access to the interactive API documentation at <http://127.0.0.1:8000/swagger/full>
 
 #### Documentation Setup
 
@@ -339,6 +337,34 @@ When making changes to the database schema:
    uv run alembic upgrade head
    ```
 
+#### Email templates
+
+This project uses [MJML](https://mjml.io/) to write email templates and [Jinja2](https://jinja.palletsprojects.com/en/latest/) for variable substitution at runtime.
+
+- **Location**
+
+  - Source MJML templates: `backend/app/templates/emails/src/`
+  - Reusable components: `backend/app/templates/emails/src/components/`
+  - Compiled HTML output: `backend/app/templates/emails/build/` (This directory is **auto-generated**—do not edit files here.)
+
+- **Editing Guidelines**
+
+  - Use **MJML** for structure and the `{{include:component_name}}` directive to reuse components.
+  - Use **Jinja2-style variables** in templates, e.g., `{{ username }}`, `{{ verification_link }}`.
+  - Keep components small and shared styles in `src/components/styles.mjml`.
+  - **Do not modify** files in `build/`.
+
+- **Compiling Templates**
+  Run the compilation script from the repository root:
+
+  ```bash
+  cd backend
+  python scripts/compile_email_templates.py
+  ```
+
+- **Interactive Preview**
+  For visual development, use MJML online tools or the [MJML VS Code extension](https://marketplace.visualstudio.com/items?itemName=mjmlio.vscode-mjml).
+
 ### Frontend Development
 
 Set up your environment as described in the [Getting Started](#getting-started) section.

diff --git a/backend/.dockerignore b/backend/.dockerignore
@@ -96,3 +96,6 @@ MANIFEST
 
 # Local logs
 ./logs
+
+# Include built email templates
+!app/templates/emails/build/
diff --git a/backend/.env.example b/backend/.env.example
@@ -28,6 +28,12 @@ EMAIL_PASSWORD='your-email-password'                        # 🔀 Password for
 EMAIL_FROM='Your Name <your.sending.alias.@example.com>'    # 🔀 Email address from which the emails are sent. Can be different from the SMTP server username.
 EMAIL_REPLY_TO='your.replyto.alias.@example.com'            # 🔀 Email address to which replies are sent. Can be different from the SMTP server username.
 
+# Redis settings for caching (disposable email domains, sessions, etc.)
+REDIS_HOST='localhost'                                      # Redis server host (use 'cache' in Docker)
+REDIS_PORT='6379'                                           # Redis server port
+REDIS_DB='0'                                                # Redis database number (0-15)
+REDIS_PASSWORD=''                                           # 🔀 Redis password (leave empty if no password)
+
 # Superuser details
 SUPERUSER_EMAIL='your-email@example.com' # 🔀
 SUPERUSER_PASSWORD='example_password'    # 🔀

diff --git a/backend/.gitignore b/backend/.gitignore
@@ -80,3 +80,6 @@ backups/*
 # VS Code settings
 !.vscode/settings.json
 !.vscode/extensions.json
+
+# Include built email templates
+!app/templates/emails/build/
diff --git a/backend/Dockerfile b/backend/Dockerfile
@@ -1,5 +1,5 @@
 # --- Builder stage ---
-FROM ghcr.io/astral-sh/uv:0.9-python3.13-trixie-slim@sha256:87db60325200a4fa5e9259fe43ff14c90c429adee952a8efe3f21b278409d09a AS builder
+FROM ghcr.io/astral-sh/uv:0.9-python3.14-trixie-slim AS builder
 
 # Install git for custom dependencies (fastapi-users-db-sqlmodel)
 RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
@@ -34,11 +34,10 @@ RUN --mount=type=cache,target=/root/.cache/uv \
     uv sync --locked --no-editable --no-default-groups --group=api
 
 # --- Final runtime stage ---
-FROM python:3.14-slim@sha256:1e7c3510ceb3d6ebb499c86e1c418b95cb4e5e2f682f8e195069f470135f8d51
+FROM python:3.14-slim
 
 # Build arguments
 ARG WORKDIR=/opt/relab/backend
-ARG APP_PORT=8000
 ARG APP_USER=appuser
 
 # Set up a non-root user
@@ -54,11 +53,11 @@ ENV PYTHONPATH=$WORKDIR \
     PYTHONUNBUFFERED=1 \
     PATH="$WORKDIR/.venv/bin:$PATH"
 
-# Expose the application port
-EXPOSE 8000
-
 # Switch to non-root user
 USER $APP_USER
 
+# Expose the application port
+EXPOSE 8000
+
 # Run the FastAPI application
 CMD [".venv/bin/fastapi", "run", "app/main.py", "--host", "0.0.0.0", "--port", "8000"]
diff --git a/backend/Dockerfile.dev b/backend/Dockerfile.dev
@@ -1,6 +1,6 @@
 # Development Dockerfile for FastAPI Backend
 # Note: This requires mounting the source code as a volume in docker-compose.override.yml
-FROM ghcr.io/astral-sh/uv:0.9-python3.13-trixie-slim@sha256:87db60325200a4fa5e9259fe43ff14c90c429adee952a8efe3f21b278409d09a
+FROM ghcr.io/astral-sh/uv:0.9-python3.14-trixie-slim
 
 # Build arguments
 ARG WORKDIR=/opt/relab/backend

diff --git a/backend/Dockerfile.migrations b/backend/Dockerfile.migrations
@@ -1,6 +1,5 @@
 # --- Builder stage ---
-FROM ghcr.io/astral-sh/uv:0.9-python3.13-trixie-slim@sha256:87db60325200a4fa5e9259fe43ff14c90c429adee952a8efe3f21b278409d09a AS builder
-
+FROM ghcr.io/astral-sh/uv:0.9-python3.14-trixie-slim AS builder
 WORKDIR /opt/relab/backend_migrations
 
 # Install git for custom dependencies (fastapi-users-db-sqlmodel)
@@ -33,7 +32,7 @@ COPY scripts/ scripts/
 COPY app/ app/
 
 # --- Final runtime stage ---
-FROM python:3.14-slim@sha256:1e7c3510ceb3d6ebb499c86e1c418b95cb4e5e2f682f8e195069f470135f8d51
+FROM python:3.14-slim
 
 # Build arguments
 ARG WORKDIR=/opt/relab/backend_migrations

diff --git a/backend/alembic/env.py b/backend/alembic/env.py
@@ -4,10 +4,11 @@
 from pathlib import Path
 
 import alembic_postgresql_enum  # noqa: F401 (Make sure the PostgreSQL ENUM type is recognized)
-from alembic import context
 from sqlalchemy import engine_from_config, pool
 from sqlmodel import SQLModel  # Include the SQLModel metadata
 
+from alembic import context
+
 # Load settings from the FastAPI app config
 project_root = Path(__file__).resolve().parents[1]
 sys.path.append(str(project_root))