Moonvault

A personal art vault with a Pixiv-style public gallery.

Store your illustrations privately, at full quality and true aspect ratio, and choose which pieces to share on a public, browsable gallery — complete with tags, bookmarks, rankings, and artist profiles.

I will attach a short showcase video later when I finish this project

Moonvault is a full-stack media platform combining two things that don't usually live in the same product: a private, quota-managed personal storage system (like Dropbox) and a public, social art gallery (like Pixiv or Pinterest). Every upload goes through an asynchronous processing pipeline - thumbnail generation, EXIF extraction, and perceptual-hash duplicate detection - before it's ever shown anywhere.

This project was built end-to-end as a solo full-stack engineering exercise, with a deliberate emphasis on real backend systems work (storage abstraction, async job processing, quota enforcement, rate limiting) rather than a purely CRUD-driven app.

flowchart TD
    Client[Browser] --> Web[Next.js Frontend]
    Web -->|Server-side, cookie auth| API[NestJS API]
    API --> DB[(PostgreSQL)]
    API --> Queue[BullMQ / Redis]
    Queue --> Worker[Image Processor]
    Worker --> Storage[(Backblaze B2)]
    API --> Storage
    Worker --> DB

The frontend never talks to the backend directly from client-side JavaScript - every authenticated request is proxied through a Next.js Route Handler running server-side, which attaches the JWT from an httpOnly cookie. This keeps the auth token completely inaccessible to browser JavaScript.

moonvault/
├── apps/
│   ├── api/          # NestJS backend
│   └── web/          # Next.js frontend
├── packages/
│   └── shared/       # Shared types/utilities (reserved)
├── docker-compose.dev.yml
└── Makefile           # Local dev container management

Prerequisites: Node.js 22+, pnpm, Docker.

git clone https://github.com/zephyrkaidren/moonvault.git
cd moonvault
pnpm install

Start the local dependencies (PostgreSQL, Redis, Mailhog for email testing):

make db-up

Set up environment variables - copy each .env.example to .env in both apps/api and apps/web, and fill in the values (storage credentials, JWT secret, etc.).

Run database migrations:

cd apps/api
pnpm dlx prisma migrate dev

Run both apps (in separate terminals):

# API
cd apps/api && pnpm run start:dev

# Frontend
cd apps/web && pnpm run dev

Run the full check suite (lint, build, test) from the repo root:

pnpm run lint
pnpm run build
pnpm run test

Storage & media pipeline

• Per-user storage quotas, enforced against actual uploaded byte counts
• Provider-agnostic storage abstraction (StorageProvider interface) - swap the backing storage service without touching any application code. Currently backed by Backblaze B2 (S3-compatible), with a local-disk implementation for development
• Asynchronous processing via BullMQ: thumbnail generation (sharp), EXIF metadata extraction (GPS data deliberately never parsed), and perceptual-hash duplicate detection
• Signed, time-limited object URLs with server-side caching for efficient, cache-friendly delivery

Public gallery

• Cursor-paginated public feed, filterable by tag and image orientation
• Time-windowed ranking page (daily / weekly / monthly), ranked by bookmarks
• Artist profile pages with public stats
• Bookmarking, tagging, and per-image visibility control (public/private)

Accounts & security

• JWT-based authentication with httpOnly cookie storage (auth handled server-side via Next.js Route Handlers, never exposed to client-side JavaScript)
• Username + email registration, generic login-failure messaging to prevent account enumeration
• Full forgot-password / reset-password flow with expiring, single-use tokens, delivered via a swappable email-provider abstraction
• Per-route rate limiting on authentication and upload endpoints
• Editable profile (display name, password) with real ownership checks throughout

• Auth, quota system, and storage abstraction
• Upload, processing pipeline (thumbnails, EXIF, duplicate detection)
• Public gallery, bookmarks, tags, ranking, artist profiles
• Frontend: auth pages, dashboard, gallery, artist profiles
• Production storage backend (Backblaze B2)
• Auth hardening: password reset, rate limiting
• Automated frontend test coverage
• Deployment

MIT - see LICENSE.