Add ability to export articles, track publications in json file on NGINX, fix vulnerabilities and refactor

2025-11-22 02:41:35 +01:00 · 2024-11-19 18:49:40 +01:00
parent 037165947b
commit ada54c6f06
40 changed files with 844 additions and 1570 deletions
--- a/rest-api/db/migrations/20240719071602_main_tables.sql
+++ b/rest-api/db/migrations/20240719071602_main_tables.sql
@@ -29,16 +29,16 @@ GRANT USAGE ON SCHEMA internal TO authenticated_user;

 ALTER DEFAULT PRIVILEGES REVOKE EXECUTE ON FUNCTIONS FROM PUBLIC;

-CREATE FUNCTION internal.immutable_unaccent (TEXT)
+CREATE FUNCTION internal.generate_slug (TEXT)
  RETURNS TEXT
  AS $$
  SELECT
-    unaccent ($1);
+    REGEXP_REPLACE(REGEXP_REPLACE(REGEXP_REPLACE(REGEXP_REPLACE(LOWER(TRIM(REGEXP_REPLACE(unaccent ($1), '\s+', '-', 'g'))), '[^\w-]', '', 'g'), '-+', '-', 'g'), '^-+', '', 'g'), '-+$', '', 'g')
 $$
 LANGUAGE sql
 IMMUTABLE;

-GRANT EXECUTE ON FUNCTION internal.immutable_unaccent TO authenticated_user;
+GRANT EXECUTE ON FUNCTION internal.generate_slug TO authenticated_user;

 CREATE TABLE internal.user (
  id UUID PRIMARY KEY DEFAULT gen_random_uuid (),
@@ -54,11 +54,12 @@ CREATE TABLE internal.website (
  user_id UUID REFERENCES internal.user (id) ON DELETE CASCADE NOT NULL DEFAULT (CURRENT_SETTING('request.jwt.claims', TRUE)::JSON ->> 'user_id') ::UUID,
  content_type VARCHAR(10) CHECK (content_type IN ('Blog', 'Docs')) NOT NULL,
  title VARCHAR(50) NOT NULL CHECK (TRIM(title) != ''),
+  slug VARCHAR(50) GENERATED ALWAYS AS (internal.generate_slug (title)) STORED,
  max_storage_size INT NOT NULL DEFAULT CURRENT_SETTING('app.website_max_storage_size') ::INT,
-  is_published BOOLEAN NOT NULL DEFAULT FALSE,
  created_at TIMESTAMPTZ NOT NULL DEFAULT CLOCK_TIMESTAMP(),
  last_modified_at TIMESTAMPTZ NOT NULL DEFAULT CLOCK_TIMESTAMP(),
-  last_modified_by UUID REFERENCES internal.user (id) ON DELETE SET NULL
+  last_modified_by UUID REFERENCES internal.user (id) ON DELETE SET NULL,
+  UNIQUE (user_id, slug)
 );

 CREATE TABLE internal.media (
@@ -118,7 +119,7 @@ CREATE TABLE internal.article (
  website_id UUID REFERENCES internal.website (id) ON DELETE CASCADE NOT NULL,
  user_id UUID REFERENCES internal.user (id) ON DELETE SET NULL DEFAULT (CURRENT_SETTING('request.jwt.claims', TRUE)::JSON ->> 'user_id') ::UUID,
  title VARCHAR(100) NOT NULL CHECK (TRIM(title) != ''),
-  slug VARCHAR(100) GENERATED ALWAYS AS (REGEXP_REPLACE(REGEXP_REPLACE(REGEXP_REPLACE(REGEXP_REPLACE(LOWER(TRIM(REGEXP_REPLACE(internal.immutable_unaccent (title), '\s+', '-', 'g'))), '[^\w-]', '', 'g'), '-+', '-', 'g'), '^-+', '', 'g'), '-+$', '', 'g')) STORED,
+  slug VARCHAR(100) GENERATED ALWAYS AS (internal.generate_slug (title)) STORED,
  meta_description VARCHAR(250) CHECK (TRIM(meta_description) != ''),
  meta_author VARCHAR(100) CHECK (TRIM(meta_author) != ''),
  cover_image UUID REFERENCES internal.media (id) ON DELETE SET NULL,
@@ -140,14 +141,6 @@ CREATE TABLE internal.footer (
  last_modified_by UUID REFERENCES internal.user (id) ON DELETE SET NULL
 );

-CREATE TABLE internal.legal_information (
-  website_id UUID PRIMARY KEY REFERENCES internal.website (id) ON DELETE CASCADE,
-  main_content VARCHAR(200000) NOT NULL CHECK (TRIM(main_content) != ''),
-  created_at TIMESTAMPTZ NOT NULL DEFAULT CLOCK_TIMESTAMP(),
-  last_modified_at TIMESTAMPTZ NOT NULL DEFAULT CLOCK_TIMESTAMP(),
-  last_modified_by UUID REFERENCES internal.user (id) ON DELETE SET NULL
-);
-
 CREATE TABLE internal.collab (
  website_id UUID REFERENCES internal.website (id) ON DELETE CASCADE,
  user_id UUID REFERENCES internal.user (id) ON DELETE CASCADE,
@@ -161,8 +154,6 @@ CREATE TABLE internal.collab (
 -- migrate:down
 DROP TABLE internal.collab;

-DROP TABLE internal.legal_information;
-
 DROP TABLE internal.footer;

 DROP TABLE internal.article;
@@ -183,7 +174,7 @@ DROP TABLE internal.user;

 DROP SCHEMA api;

-DROP FUNCTION internal.immutable_unaccent;
+DROP FUNCTION internal.generate_slug;

 DROP SCHEMA internal;

--- a/rest-api/db/migrations/20240720132802_exposed_views_functions.sql
+++ b/rest-api/db/migrations/20240720132802_exposed_views_functions.sql
@@ -70,13 +70,6 @@ SELECT
 FROM
  internal.footer;

-CREATE VIEW api.legal_information WITH ( security_invoker = ON
-) AS
-SELECT
-  *
-FROM
-  internal.legal_information;
-
 CREATE VIEW api.collab WITH ( security_invoker = ON
 ) AS
 SELECT
@@ -137,7 +130,7 @@ GRANT SELECT ON api.account TO authenticated_user;

 GRANT SELECT ON api.user TO authenticated_user;

-GRANT SELECT, UPDATE (title, is_published), DELETE ON internal.website TO authenticated_user;
+GRANT SELECT, UPDATE (title), DELETE ON internal.website TO authenticated_user;

 GRANT SELECT, UPDATE, DELETE ON api.website TO authenticated_user;

@@ -165,10 +158,6 @@ GRANT SELECT, UPDATE (additional_text) ON internal.footer TO authenticated_user;

 GRANT SELECT, UPDATE ON api.footer TO authenticated_user;

-GRANT SELECT, INSERT (website_id, main_content), UPDATE (website_id, main_content), DELETE ON internal.legal_information TO authenticated_user;
-
-GRANT SELECT, INSERT, UPDATE, DELETE ON api.legal_information TO authenticated_user;
-
 GRANT SELECT, INSERT (website_id, user_id, permission_level), UPDATE (permission_level), DELETE ON internal.collab TO authenticated_user;

 GRANT SELECT, INSERT, UPDATE, DELETE ON api.collab TO authenticated_user;
@@ -178,8 +167,6 @@ DROP FUNCTION api.create_website;

 DROP VIEW api.collab;

-DROP VIEW api.legal_information;
-
 DROP VIEW api.footer;

 DROP VIEW api.home;
--- a/rest-api/db/migrations/20240724191017_row_level_security.sql
+++ b/rest-api/db/migrations/20240724191017_row_level_security.sql
@@ -17,8 +17,6 @@ ALTER TABLE internal.docs_category ENABLE ROW LEVEL SECURITY;

 ALTER TABLE internal.footer ENABLE ROW LEVEL SECURITY;

-ALTER TABLE internal.legal_information ENABLE ROW LEVEL SECURITY;
-
 ALTER TABLE internal.collab ENABLE ROW LEVEL SECURITY;

 CREATE FUNCTION internal.user_has_website_access (website_id UUID, required_permission INT, collaborator_permission_level INT DEFAULT NULL, collaborator_user_id UUID DEFAULT NULL, article_user_id UUID DEFAULT NULL, raise_error BOOLEAN DEFAULT TRUE, OUT has_access BOOLEAN)
@@ -155,22 +153,6 @@ CREATE POLICY update_footer ON internal.footer
  FOR UPDATE
    USING (internal.user_has_website_access (website_id, 20));

-CREATE POLICY view_legal_information ON internal.legal_information
-  FOR SELECT
-    USING (internal.user_has_website_access (website_id, 10));
-
-CREATE POLICY update_legal_information ON internal.legal_information
-  FOR UPDATE
-    USING (internal.user_has_website_access (website_id, 30));
-
-CREATE POLICY delete_legal_information ON internal.legal_information
-  FOR DELETE
-    USING (internal.user_has_website_access (website_id, 30));
-
-CREATE POLICY insert_legal_information ON internal.legal_information
-  FOR INSERT
-    WITH CHECK (internal.user_has_website_access (website_id, 30));
-
 CREATE POLICY view_collaborations ON internal.collab
  FOR SELECT
    USING (internal.user_has_website_access (website_id, 10));
@@ -232,14 +214,6 @@ DROP POLICY view_footer ON internal.footer;

 DROP POLICY update_footer ON internal.footer;

-DROP POLICY insert_legal_information ON internal.legal_information;
-
-DROP POLICY delete_legal_information ON internal.legal_information;
-
-DROP POLICY update_legal_information ON internal.legal_information;
-
-DROP POLICY view_legal_information ON internal.legal_information;
-
 DROP POLICY view_collaborations ON internal.collab;

 DROP POLICY insert_collaborations ON internal.collab;
@@ -268,7 +242,5 @@ ALTER TABLE internal.docs_category DISABLE ROW LEVEL SECURITY;

 ALTER TABLE internal.footer DISABLE ROW LEVEL SECURITY;

-ALTER TABLE internal.legal_information DISABLE ROW LEVEL SECURITY;
-
 ALTER TABLE internal.collab DISABLE ROW LEVEL SECURITY;

--- a/rest-api/db/migrations/20240805132306_last_modified_triggers.sql
+++ b/rest-api/db/migrations/20240805132306_last_modified_triggers.sql
@@ -68,11 +68,6 @@ CREATE TRIGGER update_footer_last_modified
  FOR EACH ROW
  EXECUTE FUNCTION internal.update_last_modified ();

-CREATE TRIGGER update_legal_information_last_modified
-  BEFORE INSERT OR UPDATE OR DELETE ON internal.legal_information
-  FOR EACH ROW
-  EXECUTE FUNCTION internal.update_last_modified ();
-
 CREATE TRIGGER update_collab_last_modified
  BEFORE INSERT OR UPDATE OR DELETE ON internal.collab
  FOR EACH ROW
@@ -93,8 +88,6 @@ DROP TRIGGER update_docs_category_modified ON internal.docs_category;

 DROP TRIGGER update_footer_last_modified ON internal.footer;

-DROP TRIGGER update_legal_information_last_modified ON internal.legal_information;
-
 DROP TRIGGER update_collab_last_modified ON internal.collab;

 DROP FUNCTION internal.update_last_modified;
--- a/rest-api/db/migrations/20240911070907_change_log.sql
+++ b/rest-api/db/migrations/20240911070907_change_log.sql
@@ -127,11 +127,6 @@ CREATE TRIGGER track_changes_footer
  FOR EACH ROW
  EXECUTE FUNCTION internal.track_changes ();

-CREATE TRIGGER track_changes_legal_information
-  AFTER INSERT OR UPDATE OR DELETE ON internal.legal_information
-  FOR EACH ROW
-  EXECUTE FUNCTION internal.track_changes ();
-
 CREATE TRIGGER track_changes_collab
  AFTER INSERT OR UPDATE OR DELETE ON internal.collab
  FOR EACH ROW
@@ -154,8 +149,6 @@ DROP TRIGGER track_changes_docs_category ON internal.docs_category;

 DROP TRIGGER track_changes_footer ON internal.footer;

-DROP TRIGGER track_changes_legal_information ON internal.legal_information;
-
 DROP TRIGGER track_changes_collab ON internal.collab;

 DROP FUNCTION internal.track_changes;
--- a/rest-api/db/migrations/20240920090915_custom_domain_prefix.sql
+++ b/rest-api/db/migrations/20240920090915_custom_domain_prefix.sql
@@ -1,108 +0,0 @@
-- migrate:up
-CREATE TABLE internal.domain_prefix (
-  website_id UUID PRIMARY KEY REFERENCES internal.website (id) ON DELETE CASCADE,
-  prefix VARCHAR(16) UNIQUE NOT NULL CHECK (LENGTH(prefix) >= 3 AND prefix ~ '^[a-z]+(-[a-z]+)*$' AND prefix != 'previews'),
-  created_at TIMESTAMPTZ NOT NULL DEFAULT CLOCK_TIMESTAMP(),
-  last_modified_at TIMESTAMPTZ NOT NULL DEFAULT CLOCK_TIMESTAMP(),
-  last_modified_by UUID REFERENCES internal.user (id) ON DELETE SET NULL
-);
-
-CREATE VIEW api.domain_prefix WITH ( security_invoker = ON
-) AS
-SELECT
-  *
-FROM
-  internal.domain_prefix;
-
-GRANT SELECT ON internal.domain_prefix TO authenticated_user;
-
-GRANT SELECT ON api.domain_prefix TO authenticated_user;
-
-ALTER TABLE internal.domain_prefix ENABLE ROW LEVEL SECURITY;
-
-CREATE POLICY view_domain_prefix ON internal.domain_prefix
-  FOR SELECT
-    USING (internal.user_has_website_access (website_id, 10));
-
-CREATE FUNCTION api.set_domain_prefix (website_id UUID, prefix VARCHAR(16), OUT was_set BOOLEAN)
-AS $$
-DECLARE
-  _has_access BOOLEAN;
-  _old_domain_prefix VARCHAR(16);
-  _base_path CONSTANT TEXT := '/var/www/archtika-websites/';
-  _old_path TEXT;
-  _new_path TEXT;
-BEGIN
-  _has_access = internal.user_has_website_access (set_domain_prefix.website_id, 30);
-  SELECT
-    d.prefix INTO _old_domain_prefix
-  FROM
-    internal.domain_prefix AS d
-  WHERE
-    d.website_id = set_domain_prefix.website_id;
-  INSERT INTO internal.domain_prefix (website_id, prefix)
-    VALUES (set_domain_prefix.website_id, set_domain_prefix.prefix)
-  ON CONFLICT ON CONSTRAINT domain_prefix_pkey
-    DO UPDATE SET
-      prefix = EXCLUDED.prefix;
-  _old_path = _base_path || COALESCE(_old_domain_prefix, set_domain_prefix.website_id::TEXT);
-  _new_path = _base_path || set_domain_prefix.prefix;
-  IF _old_path != _new_path THEN
-    EXECUTE FORMAT('COPY (SELECT '''') TO PROGRAM ''mv -T %s %s''', _old_path, _new_path);
-  END IF;
-  was_set := TRUE;
-END;
-$$
-LANGUAGE plpgsql
-SECURITY DEFINER;
-
-GRANT EXECUTE ON FUNCTION api.set_domain_prefix TO authenticated_user;
-
-CREATE FUNCTION api.delete_domain_prefix (website_id UUID, OUT was_deleted BOOLEAN)
-AS $$
-DECLARE
-  _has_access BOOLEAN;
-  _old_domain_prefix VARCHAR(16);
-  _base_path CONSTANT TEXT := '/var/www/archtika-websites/';
-  _old_path TEXT;
-  _new_path TEXT;
-BEGIN
-  _has_access = internal.user_has_website_access (delete_domain_prefix.website_id, 30);
-  DELETE FROM internal.domain_prefix AS d
-  WHERE d.website_id = delete_domain_prefix.website_id
-  RETURNING
-    prefix INTO _old_domain_prefix;
-  _old_path = _base_path || _old_domain_prefix;
-  _new_path = _base_path || delete_domain_prefix.website_id;
-  EXECUTE FORMAT('COPY (SELECT '''') TO PROGRAM ''mv -T %s %s''', _old_path, _new_path);
-  was_deleted := TRUE;
-END;
-$$
-LANGUAGE plpgsql
-SECURITY DEFINER;
-
-GRANT EXECUTE ON FUNCTION api.delete_domain_prefix TO authenticated_user;
-
-CREATE TRIGGER update_domain_prefix_last_modified
-  BEFORE INSERT OR UPDATE OR DELETE ON internal.domain_prefix
-  FOR EACH ROW
-  EXECUTE FUNCTION internal.update_last_modified ();
-
-CREATE TRIGGER track_changes_domain_prefix
-  AFTER INSERT OR UPDATE OR DELETE ON internal.domain_prefix
-  FOR EACH ROW
-  EXECUTE FUNCTION internal.track_changes ();
-
-- migrate:down
-DROP TRIGGER track_changes_domain_prefix ON internal.domain_prefix;
-
-DROP TRIGGER update_domain_prefix_last_modified ON internal.domain_prefix;
-
-DROP FUNCTION api.set_domain_prefix;
-
-DROP FUNCTION api.delete_domain_prefix;
-
-DROP VIEW api.domain_prefix;
-
-DROP TABLE internal.domain_prefix;
-
--- a/rest-api/db/migrations/20241006165029_administrator.sql
+++ b/rest-api/db/migrations/20241006165029_administrator.sql
@@ -12,14 +12,14 @@ CREATE FUNCTION api.user_websites_storage_size ()
  AS $$
 DECLARE
  _user_id UUID := (CURRENT_SETTING('request.jwt.claims', TRUE)::JSON ->> 'user_id')::UUID;
-  _tables TEXT[] := ARRAY['article', 'collab', 'docs_category', 'domain_prefix', 'footer', 'header', 'home', 'legal_information', 'media', 'settings', 'change_log'];
+  _tables TEXT[] := ARRAY['article', 'collab', 'docs_category', 'footer', 'header', 'home', 'media', 'settings', 'change_log'];
  _query TEXT;
  _union_queries TEXT := '';
 BEGIN
  FOR i IN 1..ARRAY_LENGTH(_tables, 1)
  LOOP
    _union_queries := _union_queries || FORMAT('
-      SELECT SUM(PG_COLUMN_SIZE(t)) FROM internal.%s AS t WHERE t.website_id = w.id', _tables[i]);
+      SELECT SUM(PG_COLUMN_SIZE(t)) FROM internal.%I AS t WHERE t.website_id = w.id', _tables[i]);
    IF i < ARRAY_LENGTH(_tables, 1) THEN
      _union_queries := _union_queries || ' UNION ALL ';
    END IF;
@@ -67,14 +67,14 @@ DECLARE
    WHERE
      w.id = _website_id);
  _max_storage_bytes BIGINT := _max_storage_mb::BIGINT * 1024 * 1024;
-  _tables TEXT[] := ARRAY['article', 'collab', 'docs_category', 'domain_prefix', 'footer', 'header', 'home', 'legal_information', 'media', 'settings', 'change_log'];
+  _tables TEXT[] := ARRAY['article', 'collab', 'docs_category', 'footer', 'header', 'home', 'media', 'settings', 'change_log'];
  _union_queries TEXT := '';
  _query TEXT;
 BEGIN
  FOR i IN 1..ARRAY_LENGTH(_tables, 1)
  LOOP
    _union_queries := _union_queries || FORMAT('
-      SELECT SUM(PG_COLUMN_SIZE(t)) FROM internal.%s AS t WHERE t.website_id = $1', _tables[i]);
+      SELECT SUM(PG_COLUMN_SIZE(t)) FROM internal.%I AS t WHERE t.website_id = $1', _tables[i]);
    IF i < ARRAY_LENGTH(_tables, 1) THEN
      _union_queries := _union_queries || ' UNION ALL ';
    END IF;
@@ -109,11 +109,6 @@ CREATE TRIGGER _prevent_storage_excess_docs_category
  FOR EACH ROW
  EXECUTE FUNCTION internal.prevent_website_storage_size_excess ();

-CREATE TRIGGER _prevent_storage_excess_domain_prefix
-  BEFORE INSERT OR UPDATE ON internal.domain_prefix
-  FOR EACH ROW
-  EXECUTE FUNCTION internal.prevent_website_storage_size_excess ();
-
 CREATE TRIGGER _prevent_storage_excess_footer
  BEFORE UPDATE ON internal.footer
  FOR EACH ROW
@@ -129,11 +124,6 @@ CREATE TRIGGER _prevent_storage_excess_home
  FOR EACH ROW
  EXECUTE FUNCTION internal.prevent_website_storage_size_excess ();

-CREATE TRIGGER _prevent_storage_excess_legal_information
-  BEFORE INSERT OR UPDATE ON internal.legal_information
-  FOR EACH ROW
-  EXECUTE FUNCTION internal.prevent_website_storage_size_excess ();
-
 CREATE TRIGGER _prevent_storage_excess_media
  BEFORE INSERT ON internal.media
  FOR EACH ROW
@@ -159,16 +149,12 @@ DROP TRIGGER _prevent_storage_excess_collab ON internal.collab;

 DROP TRIGGER _prevent_storage_excess_docs_category ON internal.docs_category;

-DROP TRIGGER _prevent_storage_excess_domain_prefix ON internal.domain_prefix;
-
 DROP TRIGGER _prevent_storage_excess_footer ON internal.footer;

 DROP TRIGGER _prevent_storage_excess_header ON internal.header;

 DROP TRIGGER _prevent_storage_excess_home ON internal.home;

-DROP TRIGGER _prevent_storage_excess_legal_information ON internal.legal_information;
-
 DROP TRIGGER _prevent_storage_excess_media ON internal.media;

 DROP TRIGGER _prevent_storage_excess_settings ON internal.settings;
--- a/rest-api/db/migrations/20241011092744_filesystem_triggers.sql
+++ b/rest-api/db/migrations/20241011092744_filesystem_triggers.sql
@@ -4,28 +4,32 @@ CREATE FUNCTION internal.cleanup_filesystem ()
  AS $$
 DECLARE
  _website_id UUID;
-  _domain_prefix VARCHAR(16);
-  _base_path CONSTANT TEXT := '/var/www/archtika-websites/';
+  _website_user_id UUID;
+  _website_slug TEXT;
+  _username TEXT;
+  _base_path CONSTANT TEXT := '/var/www/archtika-websites';
  _preview_path TEXT;
  _prod_path TEXT;
  _article_slug TEXT;
 BEGIN
  IF TG_TABLE_NAME = 'website' THEN
    _website_id := OLD.id;
+    _website_user_id = OLD.user_id;
+    _website_slug := OLD.slug;
  ELSE
    _website_id := OLD.website_id;
  END IF;
  SELECT
-    d.prefix INTO _domain_prefix
+    u.username INTO _username
  FROM
-    internal.domain_prefix AS d
+    internal.user AS u
  WHERE
-    d.website_id = _website_id;
-  _preview_path := _base_path || 'previews/' || _website_id;
-  _prod_path := _base_path || COALESCE(_domain_prefix, _website_id::TEXT);
+    u.id = _website_user_id;
+  _preview_path := _base_path || '/previews/' || _website_id;
+  _prod_path := _base_path || '/' || _username || '/' || _website_slug;
  IF TG_TABLE_NAME = 'website' THEN
-    EXECUTE FORMAT('COPY (SELECT '''') TO PROGRAM ''rm -rf %s''', _preview_path);
-    EXECUTE FORMAT('COPY (SELECT '''') TO PROGRAM ''rm -rf %s''', _prod_path);
+    EXECUTE FORMAT('COPY (SELECT 1) TO PROGRAM ''rm -rf %s''', _preview_path);
+    EXECUTE FORMAT('COPY (SELECT 1) TO PROGRAM ''rm -rf %s''', _prod_path);
  ELSIF TG_TABLE_NAME = 'article' THEN
    SELECT
      a.slug INTO _article_slug
@@ -33,11 +37,7 @@ BEGIN
      internal.article AS a
    WHERE
      a.id = OLD.id;
-    EXECUTE FORMAT('COPY (SELECT '''') TO PROGRAM ''rm -f %s/articles/%s.html''', _preview_path, _article_slug);
-    EXECUTE FORMAT('COPY (SELECT '''') TO PROGRAM ''rm -f %s/articles/%s.html''', _prod_path, _article_slug);
-  ELSIF TG_TABLE_NAME = 'legal_information' THEN
-    EXECUTE FORMAT('COPY (SELECT '''') TO PROGRAM ''rm -f %s/legal-information.html''', _preview_path);
-    EXECUTE FORMAT('COPY (SELECT '''') TO PROGRAM ''rm -f %s/legal-information.html''', _prod_path);
+    EXECUTE FORMAT('COPY (SELECT 1) TO PROGRAM ''rm -f %s/articles/%s.html''', _preview_path, _article_slug);
  END IF;
  RETURN COALESCE(NEW, OLD);
 END;
@@ -46,7 +46,7 @@ LANGUAGE plpgsql
 SECURITY DEFINER;

 CREATE TRIGGER _cleanup_filesystem_website
-  BEFORE DELETE ON internal.website
+  BEFORE UPDATE OR DELETE ON internal.website
  FOR EACH ROW
  EXECUTE FUNCTION internal.cleanup_filesystem ();

@@ -55,17 +55,10 @@ CREATE TRIGGER _cleanup_filesystem_article
  FOR EACH ROW
  EXECUTE FUNCTION internal.cleanup_filesystem ();

-CREATE TRIGGER _cleanup_filesystem_legal_information
-  BEFORE DELETE ON internal.legal_information
-  FOR EACH ROW
-  EXECUTE FUNCTION internal.cleanup_filesystem ();
-
 -- migrate:down
 DROP TRIGGER _cleanup_filesystem_website ON internal.website;

 DROP TRIGGER _cleanup_filesystem_article ON internal.article;

-DROP TRIGGER _cleanup_filesystem_legal_information ON internal.legal_information;
-
 DROP FUNCTION internal.cleanup_filesystem;

--- a/rest-api/db/migrations/20241029160539_export_articles.sql
+++ b/rest-api/db/migrations/20241029160539_export_articles.sql
@@ -9,35 +9,28 @@ DECLARE
  _markdown_dir TEXT := '/tmp/website-' || export_articles_zip.website_id;
 BEGIN
  _has_access = internal.user_has_website_access (export_articles_zip.website_id, 20);
-
  SELECT
    FORMAT('[{ "Content-Type": "application/gzip" },'
-    '{ "Content-Disposition": "attachment; filename=\"%s\"" }]',
-    'archtika-export-articles-' || export_articles_zip.website_id || '.tar.gz') INTO _headers;
+    '{ "Content-Disposition": "attachment; filename=\"%s\"" }]', 'archtika-export-articles-' || export_articles_zip.website_id || '.tar.gz') INTO _headers;
  PERFORM
    SET_CONFIG('response.headers', _headers, TRUE);
-
-  EXECUTE FORMAT('COPY (SELECT '''') TO PROGRAM ''mkdir -p %s''', _markdown_dir || '/articles');
-
+  EXECUTE FORMAT('COPY (SELECT 1) TO PROGRAM ''mkdir -p %s''', _markdown_dir || '/articles');
  FOR _article IN (
-    SELECT a.id, a.website_id, a.slug, a.main_content
-    FROM internal.article AS a
-    WHERE a.website_id = export_articles_zip.website_id)
-  LOOP
-    EXECUTE FORMAT(
-      'COPY (SELECT %L) TO ''%s''',
-      _article.main_content,
-      _markdown_dir || '/articles/' || _article.slug || '.md'
-    );
-  END LOOP;
-
-  EXECUTE FORMAT('COPY (SELECT '''') TO PROGRAM ''tar -czf %s -C %s articles && rm %s''',
-    _markdown_dir || '/export.tar.gz',
-    _markdown_dir,
-    _markdown_dir || '/articles/*.md'
-  );
-
-  RETURN pg_read_binary_file(_markdown_dir || '/export.tar.gz');
+    SELECT
+      a.id,
+      a.website_id,
+      a.slug,
+      a.main_content
+    FROM
+      internal.article AS a
+    WHERE
+      a.website_id = export_articles_zip.website_id)
+    LOOP
+      EXECUTE FORMAT('COPY (SELECT %L) TO ''%s'' WITH (FORMAT CSV)', COALESCE(_article.main_content, 'No content yet'), _markdown_dir || '/articles/' || _article.slug || '.md');
+      EXECUTE FORMAT('COPY (SELECT 1) TO PROGRAM ''sed -i "s/^\"//;s/\"$//;s/\"\"/\"/g" %s''', _markdown_dir || '/articles/' || _article.slug || '.md');
+    END LOOP;
+  EXECUTE FORMAT('COPY (SELECT 1) TO PROGRAM ''tar -czf %s -C %s articles && rm %s''', _markdown_dir || '/export.tar.gz', _markdown_dir, _markdown_dir || '/articles/*.md');
+  RETURN PG_READ_BINARY_FILE(_markdown_dir || '/export.tar.gz');
 END;
 $$
 LANGUAGE plpgsql
@@ -47,3 +40,4 @@ GRANT EXECUTE ON FUNCTION api.export_articles_zip TO authenticated_user;

 -- migrate:down
 DROP FUNCTION api.export_articles_zip;
+