Wood is a private, invite-only PWA where each friend gets one button: WOOD.

This repo is a small implementation built to match the PRD:

• invite-only signup with single-use expiring invite links
• username/password auth with long-lived signed sessions
• admin panel for users, invites, and global config
• exact-username friend requests, accept/reject/remove/block/mute
• directional Wood cooldowns that clear when the recipient Woods back
• pair streaks plus personal and friend-pair stats
• achievements with unlock notifications and admin awards
• Wood groups with invite-based membership and per-sender group cooldowns
• SQLite persistence with legacy JSON import
• PWA manifest, service worker, push subscription storage
• optional Web Push delivery via web-push and VAPID keys

npm start

Open http://localhost:3000.

Data is stored in SQLite at data/wood.sqlite by default. If that database is empty and an older data/wood.json file exists, the server imports it once on startup. The server creates a first admin automatically when no users exist:

• username: admin
• password: wood-admin

Change that password immediately in any real deployment.

The app uses SQLite through better-sqlite3, which is a good fit for a small private deployment in a single Docker container. Passwords are hashed with Node's crypto.scrypt, which is suitable for password storage without adding native auth infrastructure.

Build and run locally:

docker build -t wood .
docker run --rm -p 3000:3000 -v wood-data:/app/data \
  -e WOOD_BASE_URL=http://localhost:3000 \
  -e WOOD_SESSION_SECRET=change-me \
  wood

Or use Compose:

docker compose up -d --build

For deployment behind a reverse proxy, set WOOD_BASE_URL to the public HTTPS origin, set a long random WOOD_SESSION_SECRET, and keep /app/data on a persistent volume. .env.example has the Compose environment shape.

For mobile push testing without a tunnel, use a trusted local certificate. With mkcert:

mkcert -install
mkdir -p certs
mkcert -key-file certs/wood-key.pem -cert-file certs/wood-cert.pem 192.168.20.16 localhost 127.0.0.1

Then set:

HOST=192.168.20.16
WOOD_BASE_URL=https://192.168.20.16:3000
WOOD_TLS_KEY_FILE=certs/wood-key.pem
WOOD_TLS_CERT_FILE=certs/wood-cert.pem

Your phone must trust the same mkcert root CA. On iOS, AirDrop or host the root CA file from mkcert -CAROOT, install the profile, then enable full trust in Certificate Trust Settings.