feat: Move Notion import to runtime (container startup)

- Remove Notion import from build time (secrets not available)
- Create entrypoint.sh that imports at container startup
- Keep Node.js in final image (install nginx in build stage)
- Secrets are now available at runtime
- First startup will take 5-10 min for import+rebuild
- Subsequent starts use cached content unless triggered

Dockerfile

@@ -32,23 +32,8 @@ RUN if [ "$ENABLE_LATEX_CONVERSION" = "true" ]; then \
     echo "⏭️  LaTeX importer disabled - skipping..."; \
     fi
 
-# Conditionally import from Notion if ENABLE_NOTION_IMPORT=true
-ARG ENABLE_NOTION_IMPORT=false
-ARG NOTION_TOKEN
-ARG NOTION_PAGE_ID
-# Convert ARG to ENV so they're available to Node.js
-ENV NOTION_TOKEN=$NOTION_TOKEN
-ENV NOTION_PAGE_ID=$NOTION_PAGE_ID
-# Debug: show if variables are set
-RUN echo "🔍 Debug: ENABLE_NOTION_IMPORT=$ENABLE_NOTION_IMPORT"
-RUN echo "🔍 Debug: NOTION_TOKEN=${NOTION_TOKEN:+SET (${#NOTION_TOKEN} chars)}${NOTION_TOKEN:-NOT SET}"
-RUN echo "🔍 Debug: NOTION_PAGE_ID=${NOTION_PAGE_ID:+SET}${NOTION_PAGE_ID:-NOT SET}"
-RUN if [ "$ENABLE_NOTION_IMPORT" = "true" ]; then \
-    echo "🔄 Notion importer enabled - running notion:import..."; \
-    npm run notion:import; \
-    else \
-    echo "⏭️  Notion importer disabled - skipping..."; \
-    fi
+# Note: Notion import is done at RUNTIME (not build time) to access secrets
+# See entrypoint.sh for the import logic
 
 # Ensure `public/data` is a real directory with real files (not a symlink)
 # This handles the case where `public/data` is a symlink in the repo, which
@@ -66,24 +51,23 @@ RUN npm run build
 # Generate the PDF (light theme, full wait)
 RUN npm run export:pdf -- --theme=light --wait=full
 
-# Use an official Nginx runtime as the base image for serving the application
-FROM nginx:alpine
-
-# Copy the built application from the build stage
-COPY --from=build /app/dist /usr/share/nginx/html
+# Install nginx in the build stage (we'll use this image as final to keep Node.js)
+RUN apt-get update && apt-get install -y nginx && apt-get clean && rm -rf /var/lib/apt/lists/*
 
-# Copy a custom Nginx configuration file
+# Copy nginx configuration
 COPY nginx.conf /etc/nginx/nginx.conf
 
-# Create necessary directories and set permissions
-RUN mkdir -p /var/cache/nginx /var/run /var/log/nginx && \
-    chmod -R 777 /var/cache/nginx /var/run /var/log/nginx /etc/nginx/nginx.conf
+# Copy entrypoint script
+COPY entrypoint.sh /entrypoint.sh
+RUN chmod +x /entrypoint.sh
 
-# Switch to non-root user
-USER nginx
+# Create necessary directories and set permissions for nginx
+RUN mkdir -p /var/cache/nginx /var/run /var/log/nginx && \
+    chmod -R 777 /var/cache/nginx /var/run /var/log/nginx /etc/nginx/nginx.conf && \
+    chmod -R 755 /app/dist
 
 # Expose port 8080
 EXPOSE 8080
 
-# Command to run the application
-CMD ["nginx", "-g", "daemon off;"]
+# Use entrypoint script that handles Notion import if enabled
+ENTRYPOINT ["/entrypoint.sh"]

entrypoint.sh

@@ -0,0 +1,42 @@
+#!/bin/bash
+set -e
+
+echo "🚀 Starting Hugging Face Space..."
+
+# Check if Notion import is enabled and token is available
+if [ "${ENABLE_NOTION_IMPORT:-false}" = "true" ] && [ -n "$NOTION_TOKEN" ] && [ -n "$NOTION_PAGE_ID" ]; then
+    echo "🔄 Notion import enabled - fetching content from Notion..."
+    echo "   Page ID: $NOTION_PAGE_ID"
+    
+    cd /app
+    
+    # Run notion import
+    if npm run notion:import 2>&1; then
+        echo "✅ Notion import completed successfully!"
+        
+        # Rebuild the site with new content
+        echo "🔨 Rebuilding site with Notion content..."
+        npm run build 2>&1
+        
+        # Generate PDF
+        echo "📄 Generating PDF..."
+        npm run export:pdf -- --theme=light --wait=full 2>&1 || echo "⚠️  PDF generation failed (non-critical)"
+        
+        echo "✅ Site rebuilt and ready!"
+    else
+        echo "⚠️  Notion import failed - using pre-built content from build time"
+    fi
+else
+    if [ "${ENABLE_NOTION_IMPORT:-false}" = "true" ]; then
+        echo "⚠️  Notion import enabled but NOTION_TOKEN or NOTION_PAGE_ID not found"
+        echo "   NOTION_TOKEN: ${NOTION_TOKEN:+SET}${NOTION_TOKEN:-NOT SET}"
+        echo "   NOTION_PAGE_ID: ${NOTION_PAGE_ID:+SET}${NOTION_PAGE_ID:-NOT SET}"
+        echo "   → Using pre-built content from build time"
+    else
+        echo "⏭️  Notion import disabled - using pre-built content from build time"
+    fi
+fi
+
+# Start nginx
+echo "🌐 Starting nginx on port 8080..."
+exec nginx -g 'daemon off;'

nginx.conf

@@ -36,7 +36,7 @@ http {
         listen 8080;
         server_name localhost;
 
-        root /usr/share/nginx/html;
+        root /app/dist;
         index index.html;
 
         # Health check endpoint