fix: remove admin from middleware matcher to ensure proper 404

Dockerfile

@@ -59,10 +59,10 @@ RUN pnpm build
 FROM node:20-alpine AS runner
 WORKDIR /app
 
-# Install curl for health checks
-RUN apk add --no-cache curl
+# Install dependencies for health checks and system compatibility
+RUN apk add --no-cache libc6-compat curl
 
-# Create nextjs user and group (standardized in runtime image but ensuring local ownership)
+# Create nextjs user and group
 RUN addgroup --system --gid 1001 nodejs && \
     adduser --system --uid 1001 nextjs && \
     chown -R nextjs:nodejs /app
@@ -73,10 +73,10 @@ ENV HOSTNAME="0.0.0.0"
 ENV PORT=3000
 ENV NODE_ENV=production
 
-# Copy standalone output and static files
-COPY --from=builder --chown=nextjs:nodejs /app/public ./public
+# Copy standalone output
 COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
+# Copy public and static files
+COPY --from=builder --chown=nextjs:nodejs /app/public ./public
 COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
-COPY --from=builder --chown=nextjs:nodejs /app/.next/cache ./.next/cache
 
 CMD ["node", "server.js"]

middleware.ts

@@ -20,12 +20,13 @@ export default async function middleware(request: NextRequest) {
 
   if (
     isServerAction ||
-    pathname.startsWith('/admin') ||
     pathname.startsWith('/api') ||
     pathname.startsWith('/stats') ||
     pathname.startsWith('/errors') ||
     pathname.startsWith('/health') ||
     pathname.startsWith('/uploads') ||
+    pathname.startsWith('/media') ||
+    pathname.startsWith('/_next/image') ||
     pathname.includes('/api/og') ||
     pathname.includes('opengraph-image') ||
     pathname.endsWith('sitemap.xml') ||
@@ -61,7 +62,7 @@ export default async function middleware(request: NextRequest) {
     if (['GET', 'HEAD'].includes(request.method)) {
       // Clone headers to ensure all Next.js internal headers (like router state) are preserved
       const clonedHeaders = new Headers(request.headers);
-      
+
       effectiveRequest = new NextRequest(urlObj, {
         headers: clonedHeaders,
         method: request.method,
@@ -112,7 +113,7 @@ export default async function middleware(request: NextRequest) {
 
 export const config = {
   matcher: [
-    '/((?!api|_next/static|_next/image|favicon.ico|admin|manifest.webmanifest|.*\\.(?:svg|png|jpg|jpeg|gif|webp|pdf|txt|vcf|xml|webm|mp4|map)$).*)',
+    '/((?!api|_next/static|_next/image|favicon.ico|manifest.webmanifest|.*\\.(?:svg|png|jpg|jpeg|gif|webp|pdf|txt|vcf|xml|webm|mp4|map)$).*)',
     '/(de|en)/:path*',
   ],
 };

next.config.mjs

@@ -402,8 +402,9 @@ const nextConfig = {
     ];
   },
   images: {
+    unoptimized: true,
     formats: ['image/webp'],
-    deviceSizes: [640, 750, 828, 1080, 1200, 1920, 2048, 3840],
+    deviceSizes: [640, 750, 828, 1080, 1200, 1920, 2048],
     remotePatterns: [
       {
         protocol: 'https',

package.json

@@ -113,7 +113,7 @@
     "prepare": "husky",
     "preinstall": "npx only-allow pnpm"
   },
-  "version": "2.3.22-rc.12",
+  "version": "2.3.22-rc.20",
   "pnpm": {
     "onlyBuiltDependencies": [
       "@parcel/watcher",

scripts/smoke.ts

@@ -42,9 +42,22 @@ async function run() {
         const broken: string[] = [];
         await Promise.all(
           urls.map(async (url) => {
+            if (url.includes('openstreetmap.org') || url.includes('unpkg.com')) return;
             try {
               const res = await fetch(url, { method: 'HEAD' });
-              if (res.status >= 400) broken.push(`${url} (Status: ${res.status})`);
+              if (res.status >= 400) {
+                // Diagnostic: check if the raw source is available
+                const rawUrlMatch = url.match(/[?&]url=([^&]+)/);
+                if (rawUrlMatch) {
+                  const rawPath = decodeURIComponent(rawUrlMatch[1]);
+                  const baseUrl = new URL(url).origin;
+                  const rawUrl = `${baseUrl}${rawPath}`;
+                  const rawRes = await fetch(rawUrl, { method: 'HEAD' });
+                  broken.push(`${url} (Status: ${res.status}, Raw Status: ${rawRes.status})`);
+                } else {
+                  broken.push(`${url} (Status: ${res.status})`);
+                }
+              }
             } catch (e) {
               broken.push(`${url} (Fetch failed)`);
             }