feat: IPFS/IPNS integration for Real-Currents

- Add custom server.js with IPFS gateway, IPNS gateway, deploy API
- Add ipfs-http-client and mime-types dependencies
- Update dev/start scripts to use custom server
- Add GitHub Actions deploy.yml (Gandi + IPFS + IPNS publish)
- Update next.config: trailingSlash, images.unoptimized
- Add IpfsLinks component and /api/ipfs/current endpoint
- Add .env.example and docs/IPFS-INTEGRATION.md

Co-authored-by: John Hall <dancingfrog@users.noreply.github.com>

Author: cursoragent

.env.example

@@ -0,0 +1,12 @@
+# IPFS Worker Node (Phase 1 - VPS with Kubo + Caddy)
+# Required for /ipfs/*, /ipns/*, /api/deploy, /api/ipns/publish to work
+IPFS_NODE_HOST=ipfs-api.real-currents.com
+IPFS_USER=gandi
+IPFS_PASS=your-password-here
+
+# Deploy API authentication (must match GitHub Actions secret)
+DEPLOY_SECRET=generate-a-strong-random-secret
+
+# Server
+PORT=3000
+NODE_ENV=production

.github/workflows/deploy.yml

@@ -0,0 +1,73 @@
+name: Deploy to Gandi + IPFS
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          submodules: 'true'
+
+      - name: Setup Node.js
+        uses: ./.github/workflows/node.js
+
+      - name: Setup Quarto
+        uses: ./.github/workflows/quarto
+
+      - name: Build Site (Quarto + Next.js)
+        run: npm run build
+
+      - name: Deploy to Gandi via Git
+        env:
+          GANDI_GIT_URL: ${{ secrets.GANDI_GIT_URL }}
+        run: |
+          git config user.name "GitHub Actions"
+          git config user.email "actions@github.com"
+          git remote add gandi $GANDI_GIT_URL 2>/dev/null || git remote set-url gandi $GANDI_GIT_URL
+          git push gandi main --force
+
+      - name: Install ipfs-car CLI
+        run: npm install -g ipfs-car
+
+      - name: Package Build as CAR
+        run: ipfs-car pack out --output deploy.car
+
+      - name: Upload CAR to IPFS (via Gandi Gateway)
+        id: ipfs_upload
+        env:
+          DEPLOY_SECRET: ${{ secrets.DEPLOY_SECRET }}
+        run: |
+          RESPONSE=$(curl -s -X POST https://www.real-currents.com/api/deploy \
+            -H "x-api-key: $DEPLOY_SECRET" \
+            -H "Content-Type: application/vnd.ipld.car" \
+            --data-binary @deploy.car)
+
+          echo "IPFS Response: $RESPONSE"
+          CID=$(echo $RESPONSE | jq -r '.cid')
+          echo "cid=$CID" >> $GITHUB_OUTPUT
+          echo "Deployed to IPFS: $CID"
+
+      - name: Update IPNS Pointer (xr-baseline-0)
+        env:
+          DEPLOY_SECRET: ${{ secrets.DEPLOY_SECRET }}
+          CID: ${{ steps.ipfs_upload.outputs.cid }}
+        run: |
+          curl -X POST https://www.real-currents.com/api/ipns/publish \
+            -H "x-api-key: $DEPLOY_SECRET" \
+            -H "Content-Type: application/json" \
+            -d "{\"key\": \"xr-baseline-0\", \"cid\": \"$CID\"}"
+
+          echo "IPNS updated: xr-baseline-0 -> $CID"
+
+      - name: Log Deployment
+        run: |
+          echo "✅ Live site updated at https://www.real-currents.com"
+          echo "✅ IPFS snapshot: https://www.real-currents.com/ipfs/${{ steps.ipfs_upload.outputs.cid }}"
+          echo "✅ IPNS stable link: https://www.real-currents.com/ipns/xr-baseline-0"

docs/IPFS-INTEGRATION.md

@@ -0,0 +1,85 @@
+# IPFS Integration - Implementation Summary
+
+This document summarizes the IPFS/IPNS integration implemented per the Real-Currents IPFS Integration plan.
+
+## What Was Implemented
+
+### Phase 2: Gandi Node.js Server (Security Guard + Gateway)
+
+- **`server.js`** – Custom HTTP server that:
+  - Serves `/ipfs/<cid>/...` – Immutable IPFS gateway
+  - Serves `/ipns/<name>/...` – Mutable IPNS gateway (with 5-min cache)
+  - `POST /api/deploy` – CAR upload (authenticated via `x-api-key`)
+  - `POST /api/ipns/publish` – IPNS publish (authenticated)
+  - `GET /api/ipfs/current` – Returns current CID for IPNS key (for footer links)
+  - Falls through to Next.js for all other routes
+
+- **Dependencies added**: `ipfs-http-client`, `mime-types`
+
+- **Scripts updated**:
+  - `dev` – Uses custom server (with Quarto render)
+  - `start` – Production server; `start:static` – Original static server
+
+### Phase 3: GitHub Actions
+
+- **`.github/workflows/deploy.yml`** – Runs on push to `main`:
+  1. Build (Quarto + Next.js)
+  2. Deploy to Gandi via Git
+  3. Package `out/` as CAR
+  4. Upload CAR to `/api/deploy`
+  5. Publish IPNS `xr-baseline-0` → new CID
+
+### Phase 4: Next.js Configuration
+
+- **`next.config.mjs`** – Added `trailingSlash: true`, `images.unoptimized: true` (static export already configured)
+
+### Phase 6: Content Integration
+
+- **`src/components/IpfsLinks.tsx`** – Client component that fetches current CID and shows:
+  - Latest Version (IPNS) – `/ipns/xr-baseline-0`
+  - Immutable Snapshot (IPFS) – `/ipfs/<cid>` when available
+
+- **`src/app/layout.tsx`** – Footer includes `IpfsLinks`, `metadataBase` for canonical URLs
+
+## Next Steps (Manual)
+
+### Phase 1: Worker Node Setup (VPS)
+
+1. Install Kubo (IPFS) on your VPS
+2. Create IPNS key: `ipfs key gen xr-baseline-0 --type=ed25519`
+3. Install and configure Caddy with Basic Auth
+4. Point `ipfs-api.real-currents.com` to the VPS
+
+### Configure Secrets
+
+**GitHub** (Settings → Secrets and variables → Actions):
+
+- `GANDI_GIT_URL` – Gandi Git remote URL
+- `DEPLOY_SECRET` – Strong random secret (same as Gandi env)
+
+**Gandi** (or `.env` for local):
+
+- `IPFS_NODE_HOST`, `IPFS_USER`, `IPFS_PASS` – Worker node credentials
+- `DEPLOY_SECRET` – Same as GitHub secret
+
+See `.env.example` for the full list.
+
+## URL Structure
+
+| Pattern | Handler | Purpose |
+|---------|---------|---------|
+| `/xr/baseline-0`, `/`, etc. | Next.js | Live site |
+| `/ipfs/<cid>/...` | IPFS Gateway | Immutable snapshot |
+| `/ipns/xr-baseline-0/...` | IPNS Gateway | Stable pointer to latest |
+
+## Testing Locally
+
+Without the Worker node, IPFS/IPNS routes return 503. To test:
+
+```bash
+# With env vars set (copy .env.example to .env)
+npm run dev
+# Then: curl http://localhost:3000/ipns/xr-baseline-0
+```
+
+With the Worker configured, the IPFS and IPNS gateways will work as expected.

next.config.mjs

@@ -1,6 +1,11 @@
 /** @type {import('next').NextConfig} */
 const nextConfig = {
     "distDir": "out",
+    "output": "export",
+    "trailingSlash": true,
+    "images": {
+        "unoptimized": true,
+    },
     "eslint": {
         "ignoreDuringBuilds": true,
     },
@@ -10,7 +15,7 @@ const nextConfig = {
     //     "src/components/SvelteMainComponent.tsx",
     //
     // ],
-    "output": "export", // <=== enables static exports
+    // output: 'export' enables static exports (see above)
     // "output": "standalone",
     "reactStrictMode": true,
     "typescript": {