Fit Max is a full-stack e-commerce platform for a fitness and apparel brand in Bangladesh. It has a customer storefront, an admin dashboard and a real-time API backend.
Tech stack
Layer | Technologies |
|---|---|
Frontend | Next.js 16 (App Router), React 19, Tailwind CSS 4, shadcn/ui, Framer Motion, Plate.js rich-text editor, Jotai, react-hook-form + Zod |
Backend | Express 5, Mongoose 8 (MongoDB), TypeScript, Socket.io, Redis, BullMQ job queues |
Storage and media | Cloudflare R2 + CDN, with sharp image compression to WebP |
Infrastructure | Docker (dev and prod compose), Coolify deployment, Husky + lint-staged, pnpm monorepo |
Marketing and tracking | Google Analytics/GTM, Meta Pixel, Facebook Conversions API (server-side), Facebook product catalog sync |
Customer-facing features
- Storefront with home, shop (filters), product detail pages, blog, offers, location and contact pages.
- Cart, wishlist and checkout. Cart and wishlist sync between guest and logged-in users, with optimistic updates.
- Order tracking, gift cards, coupons and restock requests (customers get notified when stock returns).
- Customer dashboard with orders, address book, profile and notifications.
- Authentication: login and register, OTP verification, password reset, and guest checkout with OTP.
- Live chat with admins over Socket.io, with real-time notifications.
- Product video player, mobile zoom viewer and a sticky mobile add-to-cart bar.
Admin dashboard
Admins manage these areas:
- Catalog: products, colors, sizes, units, attributes, size guides.
- Marketing: hero banners, popup banners, navbar, home categories, offers, coupons, gift cards.
- Operations: orders, courier integration, delivery charges, locations, restock requests, customer interest, users.
- Insight and support: analytics and chat.
- Invoices: PDF generation with a branded layout.
Backend modules
attribute, auth, cart, chat, color, contact, counter, coupon, courier, deliveryCharge, facebook-capi, facebook-catalog, giftcard, hero-banner, invoice, location, navbar, notification, offer, order, otp, popup-banner, product, restockRequest, review, site-setting, size, sizeGuide, stats, unit, user, wishlist.
Engineering highlights
- Security: JWT access tokens with refresh-token rotation and a Redis blacklist, role-based access (USER, ADMIN, super admin), Helmet CSP, HPP, per-endpoint Redis rate limiting and Zod validation.
- Performance: ISR and edge-cached storefront, Redis caching in three TTL tiers, a Lighthouse 90+ target on all public routes and 1:1 optimized product images.
- Reliability: email and SMS go through BullMQ queues (retries, priorities, fallback if Redis is down). If an upload fails, the orphaned R2 files are cleaned up automatically.
- Server-side tracking: the Facebook Conversions API sends events from the backend for accurate ad attribution.
