I Built Railspress – A Rails CMS with Liquid Themes and AI Built In

2 weeks ago 1

✨ What Makes RailsPress Special?

RailsPress combines the familiarity of WordPress with the power and elegance of Ruby on Rails. It's not just another CMS—it's a complete content management ecosystem that scales from personal blogs to enterprise applications.

Traditional CMS: Full-featured admin panel with visual editing
Headless CMS: Complete API-first architecture for modern applications

Built-in AI agents for content generation and optimization
Multiple AI providers (OpenAI, Anthropic, Cohere, Google)
Smart content suggestions and SEO optimization

Liquid templating engine (Shopify-style)
Custom visual builder system (replaced GrapesJS)
Responsive design with auto dark mode
Advanced theme versioning and rollback

🆕 Major Updates & New Features

RailsPress now includes a comprehensive GDPR compliance system that rivals enterprise solutions:

Complete Data Subject Rights - All 8 GDPR rights implemented
Admin Interface - Full compliance management at /admin/gdpr
Data Export/Import - Machine-readable JSON exports
Data Erasure - Complete data deletion with audit trails
Privacy by Design - Built-in privacy protection

🍪 Enterprise Consent Management

OneTrust-level consent management system with advanced features:

Geolocation-Based Rules - Automatic region detection (EU, US, UK, Canada)
Pixel Management - Consent-aware loading for 15+ tracking pixels
Customizable Banner - Themes, colors, and positioning options
Liquid Integration - Seamless template integration with {% consent_assets %}
Admin Dashboard - Complete consent analytics and management

🤖 Model Context Protocol (MCP)

OpenAI 3.1 compatible MCP server for AI model integration:

JSON-RPC 2.0 Protocol - Full specification compliance
Tool Management - Comprehensive tool schemas and execution
Resource Access - Content browsing and management
Prompt Templates - AI interaction templates
Admin Settings - Complete configuration interface
Rate Limiting - Security and performance controls

📊 GDPR-Compliant Analytics System

Privacy-first analytics that rivals Plausible and Fathom:

Privacy-First Design - No personal data, IP anonymization, consent management
Real-Time Analytics - Live visitor tracking with active visitor count
GDPR Compliance - Full compliance with data subject rights
Bot Detection - Automatically filters out automated traffic
Data Anonymization - Auto-anonymize old data (90+ days)
Consent Management - Cookie consent banner with opt-out
CSV Export - Data portability for user rights
Multi-Tenant - Isolated analytics per tenant

✅ Complete CRUD for all resources
✅ Token-based authentication with role-based access
✅ Rate limiting (1000 req/hour)
✅ Advanced filtering & search
✅ CORS support for cross-origin requests
✅ Interactive documentation at /api/v1/docs
✅ Postman collection included

✅ Type-safe queries with full schema
✅ Real-time subscriptions support
✅ Relay-compatible with Node interface
✅ Interactive playground at /graphiql
✅ Complex queries with nested relationships

✅ Toggle headless mode in admin settings
✅ API-only access when enabled
✅ Beautiful API endpoints page for visitors
✅ CORS configuration with allowed origins
✅ API token management with 3 role levels

✅ Content Summarizer - Auto-generate post summaries
✅ Post Writer - AI-powered content creation
✅ Comments Analyzer - Sentiment analysis and moderation
✅ SEO Analyzer - Content optimization suggestions

✅ OpenAI (GPT-3.5, GPT-4)
✅ Anthropic (Claude)
✅ Cohere (Command, Generate)
✅ Google (PaLM, Gemini)

✅ Easy agent creation from plugins
✅ Simple execution: execute('content_summarizer', text)
✅ Batch processing support
✅ Error handling and fallbacks

✅ Shopify-style template engine
✅ 15+ reusable sections (hero, features, testimonials, etc.)
✅ 13+ utility snippets (navigation, pagination, etc.)
✅ Template inheritance and partials
✅ Auto dark mode support

Custom Visual Builder System

✅ Native drag-and-drop interface (replaced GrapesJS)
✅ 13+ template types (homepage, blog, pages, archives, etc.)
✅ Real-time preview with device testing
✅ Advanced section management with live editing
✅ Theme versioning with rollback capabilities
✅ Custom HTML/CSS/JS support
✅ WordPress-style template tags

✅ Multiple theme support with activation/deactivation
✅ Theme marketplace for browsing
✅ Version control with published versions
✅ Theme settings and customization
✅ Default template generation

✅ WordPress-style hooks and filters
✅ Plugin marketplace with categories
✅ 8+ working plugins included
✅ Plugin activation/deactivation
✅ Settings management with schema validation

✅ SEO Optimizer Pro - Complete SEO solution
✅ Contact Form Builder - Drag-and-drop forms
✅ Security Guardian - Advanced security features
✅ Performance Booster - Caching and optimization
✅ Analytics Pro - Advanced tracking and reports

Complete Privacy Compliance

✅ Full GDPR compliance with all data subject rights
✅ Data export functionality (Article 20 - Right to Data Portability)
✅ Data erasure system (Article 17 - Right to be Forgotten)
✅ Consent management (Article 7 - Consent)
✅ Privacy by design architecture (Article 25)
✅ Audit trails for all data processing activities
✅ Admin interface for compliance management

Data Subject Rights Implementation

✅ Right to be Informed - Comprehensive privacy notices
✅ Right of Access - Complete data export functionality
✅ Right to Rectification - Data correction mechanisms
✅ Right to Erasure - Full data deletion capabilities
✅ Right to Restrict Processing - Processing controls
✅ Right to Data Portability - Machine-readable exports
✅ Right to Object - Processing objection handling
✅ Automated Decision Rights - Human oversight controls

🍪 Consent Management System

Enterprise-Grade Consent Management

✅ OneTrust-level functionality with comprehensive features
✅ GDPR/CCPA compliance with region-specific rules
✅ Geolocation-based consent with automatic region detection
✅ Pixel management with consent-aware loading
✅ Customizable consent banner with themes and colors
✅ Liquid template integration for seamless implementation
✅ Admin interface for complete consent management
✅ API endpoints for programmatic consent handling

Consent Categories & Features

✅ Necessary Cookies (always required)
✅ Analytics Cookies (Google Analytics, Clarity, Hotjar)
✅ Marketing Cookies (Facebook, TikTok, LinkedIn, Twitter, Pinterest, Snapchat, Reddit)
✅ Functional Cookies (Mixpanel, Segment, Heap)
✅ Granular consent controls with individual category management
✅ Consent analytics and compliance reporting
✅ Consent withdrawal and modification capabilities

📊 GDPR-Compliant Analytics System

✅ GDPR compliant with no personal data collection
✅ Real-time analytics with live visitor tracking
✅ IP anonymization using SHA-256 + salt (first 16 chars only)
✅ Consent management with cookie consent banner
✅ Bot detection to filter out automated traffic
✅ Data anonymization for old data (90+ days)
✅ CSV export for data portability
✅ Multi-tenant isolated analytics per tenant

✅ Pageview tracking with referrer information
✅ Geographic data (country-level only, no city tracking)
✅ Device & browser stats (desktop/mobile/tablet breakdown)
✅ Time on page and engagement metrics
✅ Top content analysis (most viewed posts and pages)
✅ Referrer tracking to know traffic sources
✅ Hourly distribution and daily trends
✅ Bounce rate and returning visitor analysis

✅ No personal data (emails, names, precise location)
✅ No cross-site tracking or fingerprinting
✅ No persistent IDs without consent
✅ Consent-based tracking only
✅ Auto-deletion of non-consented data (30+ days)
✅ Data minimization principles
✅ User rights implementation (access, erasure, portability)

✅ Full-screen writing mode with minimal interface
✅ Editor.js integration for block-based content creation
✅ 15+ block types (headers, lists, quotes, code, images, tables)
✅ Auto-save functionality as you type
✅ Keyboard shortcuts for power users
✅ Clean JSON output perfect for APIs
✅ Dark mode support with automatic detection
✅ Media support (images, files, YouTube, Vimeo embeds)
✅ Inline formatting (bold, italic, underline, code, highlight)

✅ Large title input (40px font, bold weight)
✅ Clean canvas with centered 700px max-width
✅ Sticky toolbar with glassmorphism effect
✅ Floating save indicator with green confirmation
✅ Status badges (Draft/Published) with minimal design
✅ Real-time collaboration ready
✅ Mobile-responsive writing interface
✅ Accessibility features built-in

Multi-Platform Content Distribution

✅ Device-specific channels (Web, Mobile, Tablet, Smart TV, Email)
✅ Automatic channel detection based on user agent
✅ Content overrides for channel-specific customization
✅ Channel exclusions to hide content from specific channels
✅ Multi-domain support with locale management
✅ AI-powered content optimization for each channel
✅ GraphQL API for channel management
✅ Admin interface for complete channel control

✅ Web Channel - Desktop and standard web content
✅ Mobile Channel - Mobile-optimized content and layouts
✅ Tablet Channel - Tablet-specific content adaptations
✅ Smart TV Channel - TV-optimized content for streaming devices
✅ Newsletter Channel - Email-specific content formatting
✅ Custom Channels - User-defined channels for specific platforms
✅ Channel Overrides - Granular content customization per channel
✅ Content Exclusions - Hide specific content from channels
✅ Multi-locale Support - Language-specific channel configurations

✅ OpenAI 3.1 compatible MCP server implementation
✅ JSON-RPC 2.0 protocol with full specification support
✅ Complete API endpoints for AI model integration
✅ Tool management with comprehensive schemas
✅ Resource access for content management
✅ Prompt templates for AI interactions
✅ Admin settings interface for configuration
✅ Rate limiting and security controls

✅ Session management with handshake protocol
✅ Tool execution with parameter validation
✅ Resource browsing and content access
✅ Prompt execution with template support
✅ Real-time streaming with Server-Sent Events
✅ Authentication with API key management
✅ Comprehensive documentation and testing guides

✅ 13+ webhook events (post.created, user.updated, etc.)
✅ HMAC signature verification for security
✅ Retry logic with exponential backoff
✅ Delivery tracking with status monitoring
✅ Background processing with Sidekiq

post.created, post.updated, post.published, post.deleted
page.created, page.updated, page.published, page.deleted
comment.created, comment.approved, comment.spam
user.created, user.updated, media.uploaded

📧 Transactional Email System

✅ SMTP (Gmail, SendGrid, Mailgun, Amazon SES)
✅ Resend.com API integration
✅ Development: Letter Opener for testing

✅ Complete email logging with full details
✅ Delivery status tracking (sent, failed, pending)
✅ Provider statistics and performance metrics
✅ Test email functionality for verification
✅ One-click configuration without server restart

✅ Rich text editor (ActionText with Trix)
✅ Multiple statuses (draft, published, scheduled, private, trash)
✅ Featured images with ActiveStorage
✅ Categories & tags with hierarchical taxonomy
✅ SEO meta fields (description, keywords)
✅ Friendly URLs with slugs
✅ Publishing schedules and workflows

✅ Threaded commenting with nested replies
✅ Moderation workflow (pending, approved, spam, trash)
✅ Guest and user comments
✅ Spam protection and filtering

✅ ActiveStorage integration for file uploads
✅ Image processing and optimization
✅ File type detection and metadata
✅ CDN-ready asset serving

✅ Meta tags support (description, keywords)
✅ Open Graph and Twitter Cards
✅ JSON-LD structured data
✅ XML sitemaps generation
✅ RSS/Atom feeds
✅ Canonical URLs and clean permalinks

✅ Google Analytics integration
✅ Custom tracking pixels
✅ Performance monitoring
✅ User behavior analytics

🛡️ Security & Performance

✅ CSRF protection and XSS prevention
✅ SQL injection prevention with parameterized queries
✅ Password hashing with BCrypt
✅ API token authentication
✅ Role-based access control
✅ Content Security Policy

✅ Redis caching with configurable TTL
✅ Background job processing with Sidekiq
✅ Asset optimization and compression
✅ Database query optimization
✅ CDN-ready asset serving

Role-Based Access Control

✅ 5 user roles: Administrator, Editor, Author, Contributor, Subscriber
✅ Granular permissions for each role
✅ Secure authentication with Devise
✅ Session management and security

✅ Profile management with avatars
✅ Password reset and account recovery
✅ Email verification and confirmation
✅ User registration with approval workflows

✅ Responsive design (mobile, tablet, desktop)
✅ Dark theme optimized
✅ Command palette (CMD+K) for quick actions
✅ Tabulator tables with sorting and filtering
✅ Real-time updates with Hotwire

✅ Dashboard with statistics and analytics
✅ Content management with bulk operations
✅ User management with role assignment
✅ Plugin management with marketplace
✅ Theme management with customization
✅ Settings management with organized sections

✅ RailsPress CLI for project management
✅ Plugin generators for rapid development
✅ Theme generators with templates
✅ Database migrations and seeding

✅ 700+ tests with 95% coverage
✅ RSpec for comprehensive testing
✅ FactoryBot for test data generation
✅ System tests for user flows
✅ API tests for all endpoints

✅ 65+ documentation files organized by category
✅ API documentation with examples
✅ Plugin development guides
✅ Theme development guides
✅ Quick reference guides

Ruby 3.3.9+
Rails 7.1.5+
SQLite3 (or PostgreSQL/MySQL)
Node.js (for asset compilation)

# Clone the repository git clone https://github.com/your-username/railspress.git cd railspress # Install dependencies bundle install # Setup database rails db:create db:migrate db:seed # Start the server ./bin/dev

Public Site: http://localhost:3000
Admin Panel: http://localhost:3000/admin
GraphQL Playground: http://localhost:3000/graphiql
API Documentation: http://localhost:3000/api/v1/docs

Email: [email protected]
Password: password

Modern dark-themed admin interface with comprehensive post management, filtering, and bulk actions

More Screenshots Coming Soon

🎨 Theme Customizer - Visual template editing with GrapesJS
🤖 AI Agents - AI-powered content generation and optimization
🔌 Plugin Marketplace - Browse and manage plugins
📊 Analytics Dashboard - Content performance and user insights
🔗 Webhook Management - Real-time integrations and delivery tracking
📧 Email System - Transactional email configuration and logs
🎛️ Settings Panel - Comprehensive site configuration
📱 Mobile Admin - Responsive admin interface on mobile devices

# Get API token curl -X POST http://localhost:3000/api/v1/auth/login \ -H "Content-Type: application/json" \ -d '{"email":"[email protected]","password":"password"}' # Fetch posts curl http://localhost:3000/api/v1/posts?status=published \ -H "Authorization: Bearer YOUR_TOKEN" # Create content curl -X POST http://localhost:3000/api/v1/posts \ -H "Authorization: Bearer YOUR_TOKEN" \ -H "Content-Type: application/json" \ -d '{ "post": { "title": "New Post", "content": "<p>Content here</p>", "status": "published" } }'

# Query posts with categories query GetPosts { posts(limit: 10) { id title slug content publishedAt author { name email } categories { name slug } } } # Create a post mutation CreatePost { createPost(input: { title: "New Post" content: "<p>Content here</p>" status: "published" }) { post { id title slug } errors } }

# Execute AI agent curl -X POST http://localhost:3000/api/v1/ai_agents/execute/content_summarizer \ -H "Authorization: Bearer YOUR_TOKEN" \ -H "Content-Type: application/json" \ -d '{ "input": "Your content to summarize", "options": { "max_length": 150 } }'

{% render 'sections/hero', title: site.title, subtitle: site.tagline %} <div class="container mx-auto px-4 py-8"> <h2 class="text-3xl font-bold mb-6">Latest Posts</h2> {% for post in posts limit: 6 %} <article class="mb-8"> <h3><a href="{{ post.url }}">{{ post.title }}</a></h3> <p>{{ post.excerpt }}</p> <time>{{ post.published_at | date: '%B %d, %Y' }}</time> </article> {% endfor %} </div> {% render 'sections/footer' %}"> {% render 'sections/hero', title: site.title, subtitle: site.tagline %} <div class="container mx-auto px-4 py-8"> <h2 class="text-3xl font-bold mb-6">Latest Posts</h2> {% for post in posts limit: 6 %} <article class="mb-8"> <h3><a href="{{ post.url }}">{{ post.title }}</a></h3> <p>{{ post.excerpt }}</p> <time>{{ post.published_at | date: '%B %d, %Y' }}</time> </article> {% endfor %} </div> {% render 'sections/footer' %}

{ "name": "hero", "settings": [ { "type": "text", "id": "title", "label": "Title", "default": "Welcome" }, { "type": "textarea", "id": "subtitle", "label": "Subtitle" } ] }

# lib/plugins/my_plugin/my_plugin.rb class MyPlugin < Railspress::PluginBase plugin_name 'My Plugin' plugin_version '1.0.0' plugin_description 'A custom plugin for RailsPress' plugin_author 'Your Name' def activate super register_hooks end def deactivate super Rails.logger.info "My Plugin deactivated" end private def register_hooks add_action('post_published', :send_notification) add_filter('post_content', :enhance_content) end def send_notification(post) # Send notification logic end def enhance_content(content) # Enhance content logic content end end

# Create AI agent from plugin def create_content_agent ai_agent = AiAgent.create!( name: 'Content Enhancer', agent_type: 'content_enhancer', description: 'Enhances content with AI', prompt: 'Enhance the following content: {{input}}', active: true ) Rails.logger.info "Created AI agent: #{ai_agent.name}" end

Ruby on Rails 7.1+ - Web framework
PostgreSQL/SQLite3/MySQL - Database (agnostic)
Liquid - Templating engine
GraphQL - API layer (graphql-ruby)
Devise - Authentication
Pundit - Authorization
Sidekiq - Background jobs
Redis - Caching and sessions

Liquid Templates - Theme system
Tailwind CSS - Admin styling
Hotwire (Turbo & Stimulus) - Modern Rails UX
Custom Visual Builder - Native drag-and-drop system
Tabulator.js - Data tables
Vanilla JavaScript - Theme interactions

OpenAI API - GPT models
Anthropic API - Claude models
Cohere API - Command models
Google AI - PaLM/Gemini models
Webhook system - Real-time integrations

📖 Complete Documentation - Master index
🚀 Quick Start Guide - Get up and running
🎨 Theme Development - Build custom themes
🔌 Plugin Development - Create plugins
🔌 API Documentation - REST & GraphQL APIs
🤖 AI Agents Guide - AI integration
🔗 Webhooks Guide - Real-time integrations
🔒 GDPR Compliance Guide - Privacy compliance
🍪 Consent Management - OneTrust-level features
🤖 MCP Implementation - Model Context Protocol

✅ 700+ tests with 95% coverage
✅ Model tests - Data validation and relationships
✅ Controller tests - API endpoints and admin actions
✅ Integration tests - User flows and theme rendering
✅ System tests - End-to-end scenarios
✅ API tests - REST and GraphQL endpoints

# Run all tests bundle exec rspec # Run specific test types bundle exec rspec spec/models/ bundle exec rspec spec/controllers/ bundle exec rspec spec/integration/ # Run with coverage COVERAGE=true bundle exec rspec

# Set environment variables export RAILS_ENV=production export SECRET_KEY_BASE=your_secret_key export DATABASE_URL=your_database_url export REDIS_URL=your_redis_url # Precompile assets rails assets:precompile # Run migrations rails db:migrate # Start the server rails server -e production

Heroku - Easy deployment with add-ons
AWS - Elastic Beanstalk or EC2
DigitalOcean - Droplets with managed databases
Render - Modern platform with auto-deploy
Fly.io - Global edge deployment

✅ Dockerfile included for containerization
✅ Docker Compose for local development
✅ Multi-stage builds for optimization

We welcome contributions! Here's how you can help:

🐛 Report bugs and issues
💡 Suggest features and improvements
📝 Improve documentation
🔧 Submit pull requests
🧪 Add tests and improve coverage
🎨 Create themes and plugins

# Fork and clone the repository git clone https://github.com/your-username/railspress.git cd railspress # Install dependencies bundle install # Setup database rails db:create db:migrate db:seed # Run tests bundle exec rspec # Start development server ./bin/dev

Fork the repository
Create a feature branch
Make your changes
Add tests for new functionality
Ensure all tests pass
Submit a pull request

Current Status: ✅ PRODUCTION READY

Version: 2.0
Test Coverage: 95%+
Documentation: Complete
Features: All core features implemented
Performance: Optimized for production
Security: Hardened and secure

✅ All page types (homepage, blog, pages, archives)
✅ Custom visual builder with native drag-and-drop
✅ Admin panel with responsive design
✅ API system (REST + GraphQL)
✅ AI agents with multiple providers
✅ Plugin system with marketplace
✅ Webhook system with real-time delivery
✅ Email system with multiple providers
✅ User management with roles
✅ Content management with rich editing
✅ GDPR compliance with full data subject rights
✅ Consent management with OneTrust-level features
✅ MCP integration for AI model connectivity
✅ Content channels for multi-platform distribution
✅ Distraction-free writing with Notion-style editor
✅ GDPR-compliant analytics with privacy-first design

🚀 Modern Rails 7.1 with Hotwire
🔌 Complete API (REST + GraphQL)
🎨 Flexible theming with Liquid
🔧 Extensible plugin architecture
🧪 95% test coverage for reliability
📚 Comprehensive documentation
🤖 MCP integration for AI connectivity
🔒 GDPR compliance built-in
📺 Content channels for multi-platform distribution

✍️ Rich text editing with Trix
🤖 AI-powered content assistance
📱 Responsive admin interface
🎯 SEO optimization built-in
📊 Analytics integration ready
🔒 Secure and reliable
🎨 Custom visual builder for easy design
🍪 Consent management for compliance
📺 Multi-platform content distribution
✍️ Distraction-free writing with Notion-style editor
📊 Privacy-first analytics without data collection

🏢 Enterprise-ready with multi-tenancy
🔗 Webhook integrations for automation
📧 Transactional emails with tracking
🛡️ Security features and compliance
📈 Scalable architecture
💰 Cost-effective hosting options
🔒 GDPR compliance out of the box
🍪 OneTrust-level consent management
📺 Omnichannel content delivery
📊 GDPR-compliant analytics for privacy-conscious businesses

This project is licensed under the MIT License - see the LICENSE file for details.

Built with ❤️ using Ruby on Rails and powered by:

Custom Visual Builder - Native drag-and-drop system
Tailwind CSS - Admin styling
Trix - Rich text editor
Liquid - Templating engine
GraphQL - API layer
Sidekiq - Background jobs
Redis - Caching and sessions

Read Entire Article

I Built Railspress – A Rails CMS with Liquid Themes and AI Built In

✨ What Makes RailsPress Special?

🆕 Major Updates & New Features

🍪 Enterprise Consent Management

🤖 Model Context Protocol (MCP)

📊 GDPR-Compliant Analytics System

Custom Visual Builder System

Complete Privacy Compliance

Data Subject Rights Implementation

🍪 Consent Management System

Enterprise-Grade Consent Management

Consent Categories & Features

📊 GDPR-Compliant Analytics System

Multi-Platform Content Distribution

📧 Transactional Email System

🛡️ Security & Performance

Role-Based Access Control

More Screenshots Coming Soon

Current Status: ✅ PRODUCTION READY

Related

PDP-10 and Microcomputers – By Nemanja Trifunovic

Growing Trend of 'Vibe Coding' Added to Collins Dictionary

I Want You to Understand Chicago