moreminimore-astroreal/server.js

/**
 * MoreminiMore production server.
 *
 * Serves Astro static build (dist/) + handles POST /api/contact via Amazon SES.
 *
 * Env vars:
 *   SES_ACCESS_KEY_ID     — AWS IAM key with ses:SendEmail
 *   SES_SECRET_ACCESS_KEY — AWS IAM secret
 *   SES_REGION            — default: ap-southeast-1
 *   PORT                  — default: 4321
 */

import express from 'express';
import cors from 'cors';
import nodemailer from 'nodemailer';
import { SESClient } from '@aws-sdk/client-ses';
import { fileURLToPath } from 'node:url';
import { dirname, join } from 'node:path';
import { readFileSync, existsSync } from 'node:fs';

const __dirname = dirname(fileURLToPath(import.meta.url));
const PORT = parseInt(process.env.PORT || '4321', 10);
const DIST = join(__dirname, 'dist');

// ── SES ────────────────────────────────────────────────────────────
const sesConfigured = !!process.env.SES_ACCESS_KEY_ID;

let transporter;
if (sesConfigured) {
  const ses = new SESClient({
    region: process.env.SES_REGION || 'ap-southeast-1',
    credentials: {
      accessKeyId: process.env.SES_ACCESS_KEY_ID,
      secretAccessKey: process.env.SES_SECRET_ACCESS_KEY,
    },
  });
  transporter = nodemailer.createTransport({
    SES: { ses, aws: { SendRawEmailCommand: undefined } },
  });
}

// ── Helpers ────────────────────────────────────────────────────────
const problemLabels = {
  website_no_leads: 'เว็บมีอยู่แล้ว แต่ไม่ค่อยมีลูกค้าทัก',
  ads_not_worth_it: 'ยิงแอดอยู่ แต่ยอดขายไม่คุ้ม',
  wrong_leads: 'มีคนทักมา แต่ไม่ใช่ลูกค้าที่ใช่',
  slow_or_error_work: 'ทีมงานทำงานช้า หรือผิดพลาดบ่อย',
  ai_not_sure: 'อยากใช้ AI แต่ไม่รู้เริ่มตรงไหน',
  not_sure: 'ยังไม่แน่ใจว่าควรแก้อะไรก่อน',
};

function esc(text) {
  return String(text)
    .replace(/&/g, '&')
    .replace(/</g, '&lt;')
    .replace(/>/g, '&gt;')
    .replace(/"/g, '&quot;');
}

// ── Routes ─────────────────────────────────────────────────────────
const app = express();
app.use(cors());
app.use(express.json({ limit: '16kb' }));

// POST /api/contact
app.post('/api/contact', async (req, res) => {
  try {
    if (!sesConfigured) {
      console.warn('[api/contact] SES not configured — logging payload');
      console.info('[api/contact]', JSON.stringify(req.body, null, 2));
      return res.json({ ok: true, devMode: true });
    }

    const { name, phone, email, problems = [], message = '', pageUrl = '', userAgent = '', website = '' } = req.body;

    // Validation
    if (!name || !String(name).trim()) {
      return res.status(400).json({ ok: false, error: 'กรุณากรอกชื่อ' });
    }
    if ((!phone || !String(phone).trim()) && (!email || !String(email).trim())) {
      return res.status(400).json({ ok: false, error: 'กรุณากรอกเบอร์โทรหรืออีเมลอย่างน้อยหนึ่งอย่าง' });
    }

    // Honeypot
    if (website && String(website).trim().length > 0) {
      console.warn('[api/contact] Honeypot triggered');
      return res.json({ ok: true }); // silent success for bots
    }

    const problemsText = problems.length
      ? problems.map((k) => `- ${problemLabels[k] || k}`).join('\n')
      : '(ไม่ได้เลือก)';

    const msg = String(message || '(ไม่ได้กรอก)');
    const displayPhone = String(phone || '(ไม่ได้กรอก)');
    const displayEmail = String(email || '(ไม่ได้กรอก)');

    await transporter.sendMail({
      from: 'MoreminiMore <hello@moreminimore.com>',
      to: 'hello@moreminimore.com',
      replyTo: email && email.includes('@') ? email : undefined,
      subject: `Contact: ${name} — ${problems.length} ปัญหา`,
      text: [
        `ข้อความใหม่จาก ${name}`,
        '',
        `ปัญหาที่เลือก:`,
        problemsText,
        '',
        `รายละเอียด:`,
        msg,
        '',
        `ข้อมูลติดต่อ:`,
        `ชื่อ: ${name}`,
        `เบอร์: ${displayPhone}`,
        `อีเมล: ${displayEmail}`,
        '',
        `---`,
        `ส่งจากหน้า: ${pageUrl}`,
        `UA: ${userAgent}`,
      ].join('\n'),
      html: [
        `<h2>ข้อความใหม่จาก ${esc(name)}</h2>`,
        `<h3>ปัญหาที่เลือก</h3>`,
        `<p>${esc(problemsText).replace(/\n/g, '<br>')}</p>`,
        `<h3>รายละเอียด</h3>`,
        `<p>${esc(msg)}</p>`,
        `<h3>ข้อมูลติดต่อ</h3>`,
        `<table>`,
        `  <tr><td><strong>ชื่อ</strong></td><td>${esc(name)}</td></tr>`,
        `  <tr><td><strong>เบอร์</strong></td><td>${esc(displayPhone)}</td></tr>`,
        `  <tr><td><strong>อีเมล</strong></td><td>${esc(displayEmail)}</td></tr>`,
        `</table>`,
        `<hr>`,
        `<p style="color:#888;font-size:12px">ส่งจาก <code>${esc(pageUrl)}</code><br>UA: ${esc(userAgent)}</p>`,
      ].join('\n'),
    });

    console.info(`[api/contact] Sent email from ${name} <${email || 'no email'}>`);
    return res.json({ ok: true });
  } catch (err) {
    console.error('[api/contact] Error:', err);
    return res.status(500).json({
      ok: false,
      error: err instanceof Error ? err.message : 'เกิดข้อผิดพลาด กรุณาลองใหม่ภายหลัง',
    });
  }
});

// Static files
if (existsSync(DIST)) {
  app.use(express.static(DIST, { maxAge: '1y', etag: true }));

  // SPA-style fallback for client-side routes
  // Express 5 + path-to-regexp v8: use /{*splat} syntax instead of '*'
  app.get('/{*splat}', (req, res) => {
    // Don't intercept API or asset requests
    if (req.path.startsWith('/api/') || req.path.includes('.')) {
      return res.status(404).end();
    }
    res.sendFile(join(DIST, '404.html'));
  });
} else {
  console.warn(`[server] dist/ not found — static files not served`);
}

// ── Start ──────────────────────────────────────────────────────────
app.listen(PORT, '0.0.0.0', () => {
  console.log(`[server] Listening on http://0.0.0.0:${PORT}`);
  console.log(`[server] SES: ${sesConfigured ? 'configured ✓' : 'NOT configured (dev mode)'}`);
  console.log(`[server] Static: ${existsSync(DIST) ? `dist/ ✓` : 'dist/ NOT found'}`);
});