404
This page could not be found.
Go home
diff --git a/components/service-worker-registration.tsx b/components/service-worker-registration.tsx
index 0258a019..e5a49b25 100644
--- a/components/service-worker-registration.tsx
+++ b/components/service-worker-registration.tsx
@@ -2,6 +2,8 @@
import { useEffect } from "react";
+const BASE_PATH = (process.env.NEXT_PUBLIC_BASE_PATH ?? "").replace(/\/+$/, "");
+
export function ServiceWorkerRegistration() {
useEffect(() => {
if (typeof window === "undefined" || !("serviceWorker" in navigator)) {
@@ -23,7 +25,7 @@ export function ServiceWorkerRegistration() {
}
navigator.serviceWorker
- .register("/sw.js")
+ .register(`${BASE_PATH}/sw.js`, { scope: `${BASE_PATH}/` })
.then((registration) => {
console.log("Service Worker registered successfully:", registration);
})
diff --git a/components/settings/composing-settings.tsx b/components/settings/composing-settings.tsx
index 1da3cd14..1c75ce05 100644
--- a/components/settings/composing-settings.tsx
+++ b/components/settings/composing-settings.tsx
@@ -6,6 +6,7 @@ import { useConfig } from '@/hooks/use-config';
import { useSettingsStore } from '@/stores/settings-store';
import { SettingsSection, SettingItem, Select, ToggleSwitch } from './settings-section';
import { Mail, X } from 'lucide-react';
+import { getPathPrefix } from '@/lib/browser-navigation';
import {
SUPPORTED_SUB_ADDRESS_DELIMITERS,
isSupportedSubAddressDelimiter,
@@ -32,7 +33,7 @@ export function ComposingSettings() {
const handleSetDefaultMailProgram = useCallback(() => {
try {
if (typeof navigator !== 'undefined' && navigator.registerProtocolHandler) {
- navigator.registerProtocolHandler('mailto', `${window.location.origin}/compose?mailto=%s`);
+ navigator.registerProtocolHandler('mailto', `${window.location.origin}${getPathPrefix()}/compose?mailto=%s`);
setDefaultMailStatus('success');
}
} catch {
diff --git a/hooks/use-calendar-alerts.ts b/hooks/use-calendar-alerts.ts
index dad104ed..fb5102e2 100644
--- a/hooks/use-calendar-alerts.ts
+++ b/hooks/use-calendar-alerts.ts
@@ -11,6 +11,7 @@ import { useCalendarNotificationStore } from '@/stores/calendar-notification-sto
import { useToastStore } from '@/stores/toast-store';
import { getPendingAlerts, getPendingTaskAlerts, buildAlertKey } from '@/lib/calendar-alerts';
import { playNotificationSound } from '@/lib/notification-sound';
+import { getPathPrefix } from '@/lib/browser-navigation';
import type { CalendarEvent } from '@/lib/jmap/types';
const CHECK_INTERVAL_MS = 60 * 1000;
@@ -68,7 +69,7 @@ export function useCalendarAlerts() {
message,
duration: 15000,
onClick: () => {
- window.location.href = `/${locale}/calendar`;
+ window.location.href = `${getPathPrefix(locale)}/${locale}/calendar`;
},
});
}
@@ -97,7 +98,7 @@ export function useCalendarAlerts() {
message: taskMsg,
duration: 15000,
onClick: () => {
- window.location.href = `/${locale}/calendar`;
+ window.location.href = `${getPathPrefix(locale)}/${locale}/calendar`;
},
});
}
diff --git a/lib/browser-navigation.ts b/lib/browser-navigation.ts
index f6502455..5df6ff91 100644
--- a/lib/browser-navigation.ts
+++ b/lib/browser-navigation.ts
@@ -8,17 +8,27 @@ export function replaceWindowLocation(url: string): void {
window.location.replace(url);
}
+// Build-time constant injected by next.config.ts. When the app is built with
+// NEXT_PUBLIC_BASE_PATH=/webmail, Next.js itself prefixes routes and assets;
+// helpers below use the same value so client code stays consistent.
+const STATIC_BASE_PATH = (process.env.NEXT_PUBLIC_BASE_PATH ?? '').replace(/\/+$/, '');
+
/**
- * Returns the mount prefix from the current URL.
- * When the app is served behind a reverse proxy at e.g. /bulwark,
- * the browser sees /bulwark/en/login while Next.js sees /en/login.
+ * Returns the mount prefix the app is served at.
*
- * If a locale is supplied (e.g. from route params) it is used directly;
- * otherwise the first path segment that matches a known locale is used.
+ * Resolution order:
+ * 1. The build-time `NEXT_PUBLIC_BASE_PATH` constant (set in next.config.ts).
+ * 2. Runtime detection from `window.location.pathname` for legacy deploys
+ * where the reverse proxy mounts the app at a subpath without rebuilding.
+ *
+ * If a locale is supplied (e.g. from route params) it anchors the runtime
+ * detection; otherwise the first path segment that matches a known locale is
+ * used.
*
* Returns '' when there is no prefix.
*/
export function getPathPrefix(locale?: string): string {
+ if (STATIC_BASE_PATH) return STATIC_BASE_PATH;
if (typeof window === 'undefined') return '';
const segments = window.location.pathname.split('/').filter(Boolean);
diff --git a/lib/web-push.ts b/lib/web-push.ts
index 3eee8ee9..741b04cd 100644
--- a/lib/web-push.ts
+++ b/lib/web-push.ts
@@ -9,6 +9,10 @@ import type { IJMAPClient } from '@/lib/jmap/client-interface';
const DEVICE_CLIENT_ID_KEY = 'bulwark.push.deviceClientId.v1';
const SUBSCRIPTION_ID_KEY = 'bulwark.push.subscriptionId.v1';
+const BASE_PATH = (process.env.NEXT_PUBLIC_BASE_PATH ?? '').replace(/\/+$/, '');
+const SW_SCOPE = `${BASE_PATH}/`;
+const SW_URL = `${BASE_PATH}/sw.js`;
+
// Hosted relay so self-hosters don't need their own VAPID + Firebase setup.
// Override at build time via NEXT_PUBLIC_PUSH_RELAY_URL or at runtime by
// calling enableWebPush({ relayBaseUrl }) from the settings UI.
@@ -139,9 +143,9 @@ async function ensureServiceWorker(): Promise {
// The webmail's PWA already registers /sw.js for installability. If it
// hasn't been picked up yet (e.g. first load), kick it ourselves so the
// push handler is in place.
- let registration = await navigator.serviceWorker.getRegistration('/');
+ let registration = await navigator.serviceWorker.getRegistration(SW_SCOPE);
if (!registration) {
- registration = await navigator.serviceWorker.register('/sw.js');
+ registration = await navigator.serviceWorker.register(SW_URL, { scope: SW_SCOPE });
}
await navigator.serviceWorker.ready;
return registration;
@@ -336,7 +340,7 @@ export async function disableWebPush(params: DisableWebPushParams): Promise undefined);
}
@@ -345,7 +349,7 @@ export async function disableWebPush(params: DisableWebPushParams): Promise {
if (!isWebPushSupported()) return false;
if (Notification.permission !== 'granted') return false;
- const registration = await navigator.serviceWorker.getRegistration('/');
+ const registration = await navigator.serviceWorker.getRegistration(SW_SCOPE);
if (!registration) return false;
const sub = await registration.pushManager.getSubscription();
return sub !== null && localStorage.getItem(SUBSCRIPTION_ID_KEY) !== null;
diff --git a/next.config.ts b/next.config.ts
index cc78bd8e..02070b12 100644
--- a/next.config.ts
+++ b/next.config.ts
@@ -18,15 +18,28 @@ try {
// VERSION file not found
}
+// Subpath deployment, e.g. NEXT_PUBLIC_BASE_PATH=/webmail. Read at build time
+// because Next.js bakes basePath into emitted asset URLs and route metadata.
+// Trailing slash is stripped; an empty/missing value disables the feature.
+const rawBasePath = process.env.NEXT_PUBLIC_BASE_PATH?.trim() ?? "";
+const basePath = rawBasePath.replace(/\/+$/, "");
+if (basePath && !basePath.startsWith("/")) {
+ throw new Error(
+ `NEXT_PUBLIC_BASE_PATH must start with "/" (got: ${JSON.stringify(rawBasePath)})`
+ );
+}
+
const nextConfig: NextConfig = {
output: "standalone",
allowedDevOrigins: ["192.168.1.51"],
+ basePath: basePath || undefined,
turbopack: {
root: import.meta.dirname,
},
env: {
NEXT_PUBLIC_GIT_COMMIT: gitCommitHash,
NEXT_PUBLIC_APP_VERSION: appVersion,
+ NEXT_PUBLIC_BASE_PATH: basePath,
},
};
diff --git a/public/sw.js b/public/sw.js
index 1d188648..d5e55657 100644
--- a/public/sw.js
+++ b/public/sw.js
@@ -10,6 +10,20 @@
// task: relay sends only a state-change ping, the client fetches the
// newest unread email itself so the relay never sees mail content.
+// When the app is mounted at a subpath (Next.js basePath, e.g. /webmail), the
+// SW is served at /webmail/sw.js and registered with scope /webmail/. Derive
+// the prefix from the SW's own URL so push fetches and notification clicks
+// land on the right path - service workers can't read process.env.
+function getBasePath() {
+ const path = new URL(self.location.href).pathname;
+ // self.location is .../sw.js; strip the trailing filename to get the dir,
+ // then strip the trailing slash so it concatenates cleanly with `/foo`.
+ const dir = path.replace(/[^/]*$/, "");
+ return dir.replace(/\/+$/, "");
+}
+
+const BASE_PATH = getBasePath();
+
self.addEventListener("install", () => {
self.skipWaiting();
});
@@ -48,7 +62,7 @@ async function handlePush(event) {
let preview = null;
let previewOk = false;
try {
- const res = await fetch("/api/push/preview", {
+ const res = await fetch(`${BASE_PATH}/api/push/preview`, {
credentials: "include",
cache: "no-store",
});
@@ -99,8 +113,8 @@ async function handlePush(event) {
await self.registration.showNotification(title, {
body,
tag,
- icon: "/icon-192x192.png",
- badge: "/icon-192x192.png",
+ icon: `${BASE_PATH}/icon-192x192.png`,
+ badge: `${BASE_PATH}/icon-192x192.png`,
data,
renotify: true,
});
@@ -132,17 +146,17 @@ async function handleNotificationClick(event) {
}
if (self.clients.openWindow) {
- return self.clients.openWindow(targetUrl || "/");
+ return self.clients.openWindow(targetUrl || `${BASE_PATH}/`);
}
}
function buildClickUrl(data) {
- if (!data) return "/";
+ if (!data) return `${BASE_PATH}/`;
if (data.kind === "email" && data.emailId) {
- return `/?email=${encodeURIComponent(data.emailId)}`;
+ return `${BASE_PATH}/?email=${encodeURIComponent(data.emailId)}`;
}
// Generic "New mail" toast (preview API failed or returned no email): land
// the user on the latest unread message in their Inbox rather than just the
// app shell, so the click still feels purposeful.
- return "/?openLatestUnread=1";
+ return `${BASE_PATH}/?openLatestUnread=1`;
}