vibegen - vibecode generator

Quick Presets

Click a template to pre-fill common configurations

🏷️ App Identity & Metadata

App Name * Used for volume defaults, titles, and repository URLs

Short Purpose / Summary Brief intro description placed at the top of the prompt

Base Docker Image Default is trixie-slim

Persistent Data Directory

Will be mounted to container, gitignored and dockerignored

Source Code Repository URL Configurable footer link to source code

Footer Attribution Text Configurable credit string in page footer

Serve favicon downloaded from https://vitapavlik.cz/hiddenfiles/favicon.ico Include /about page explaining app purpose in footer

📄 Licensing

Project License From choosealicense.com (default AGPL)

License File Name File to store license in repository root

🛠️ Core Tech Stack & Container Design

Backend: Flask, SQLAlchemy (no raw SQL code!), SQLite database Frontend: Vanilla JavaScript (strictly no external JavaScript libraries/dependencies) Templates: Write Jinja templates to separate files (no hard-coded HTML inside Python) Container-First: Dockerfile and docker-compose.yml; strictly define persistent vs non-persistent data Pip in Container: Install dependencies directly onto container system with pip (no venv needed in container) Host Guard: Ensure Python packages are ONLY installed inside container image, NEVER on host system HTTP Only: Only support HTTP (app will run behind a reverse proxy) Flask Secret Key: Read from data directory; create strictly atomically (or in entrypoint) to prevent gunicorn thread race conditions Social Meta Tags: Include appropriate HTML meta tags on every page for clean link previews

Production WSGI Server

Gunicorn Workers / Threads Worker configuration in production

Port to Bind To Port the app listens on (default 5005)

👤 User Model & Authentication

User Architecture *

Admin Initialization Method

TOTP Two-Factor Authentication (2FA)

Password Hashing

Session Duration (n days) Defaults to 7 and is always configurable in the app's site settings

Alphanumeric usernames up to 48 characters; passwords up to 1024 characters TOTP uses 32-byte secret Base32-encoded with SHA256 algorithm; QR code setup in account settings Users can disable TOTP after enabling it (password required to disable) Users can change their password easily in account settings Strict data isolation: Each user can only see their own records; admin cannot view user data directly Do NOT implement password resetting via email Allow users to delete their own account

⚙️ Site Settings & Configuration

In-App Config: Application configuration (URL, SMTP, site parameters) configured directly in admin UI Auto-Generate Config: Container auto-creates default config with initial values if missing

Configuration Persistence Target Stores site settings in database, preventing gunicorn worker file race conditions on first deploy

Configuration Access Control

🎨 UI, Styling & Responsiveness

Responsive Navigation: Top navbar on desktop collapsing into hamburger menu on mobile Mobile-Friendly: Fully usable on desktop and mobile, flex-wrap on buttons, no horizontal overflow Theme Support: Support both Dark Mode and Light Mode with toggle Tooltips: Helpful tooltips throughout the interface explaining application features

Theme Accent / Styling Note

Font Preference

📜 Event Logging & Background Scheduler

Event Audit Log: Maintain log of all events (who did what, timestamped), stored in DB indefinitely Paginated textual audit log viewable directly on site by admin; records survive object deletions Link audit log entries to related entities where applicable Email / SMTP Notifications: Send email reminders or notices via configured SMTP server Dedicated Scheduler: Second service in docker-compose.yml (Dedicated Python Worker Loop); only 1 scheduler running Strict guarantee: No single reminder or notification is ever sent twice Assume configured SMTP server works correctly; do not handle or retry connection failures Log every sent email in application audit log

🧩 Specialized Features & Utilities

PoW CAPTCHA: Simplified hash-collision Proof-of-Work CAPTCHA (vanilla JS + Python) to protect public forms Concurrency Control: Optimistic Concurrency Control (OCC) via version column in SQLite to prevent race conditions Rate Limiting: Rate limit incorrect attempts (e.g. max 2 attempts per 20 min) with cooldown time countdown CSV Import: Bulk-add records by uploading or pasting CSV data Czech QR Payment: Generate QR code for Czech bank payments up to qr-platba.cz specification iCalendar (.ics): Export calendar invites/cancellations via .ics files strictly using UTC i18n Translation: Primarily English with Czech translation template; language stored in cookie (not in URI)

Timezone Handling

📝 Additional Instructions & Domain Details

Custom Functionality & Business Logic Enter your specific domain models, workflows, use cases, or custom constraints. Everything will be wrapped cleanly to 80 columns.

Include prompt.txt header rule (lines 1-5 + separator) Strictly wrap all output lines to ≤ 80 columns

Generated Instructions

0 lines • 0 chars • Columns ≤ 80

Click "Generate Instructions" above to produce your prompt.