Project Overview
We designed and built the full web platform for CrvenaOS - a privacy-focused operating system brand developed in Serbia. The product needed more than a brochure site: a bilingual (SR/EN) marketing experience, practical download and installation guides, a licence shop with automated key delivery by email, and a secure admin panel for inventory, orders, support, blog CMS, and email logs.
The Challenge
The client needed a production-ready storefront that could sell OS licences safely while educating users on download and install. Licence keys had to stay encrypted at rest, never exposed to the browser before purchase, and issued only after server-side payment confirmation. Content and UX had to work for home users, professionals, companies, OEM partners, and medical institutions - in Serbian first, with English as a second locale.
Key challenges
- Secure licence inventory and fulfilment without leaking keys client-side
- Guest checkout (name + email) with payment provider abstraction for bank integration
- Premium bilingual marketing UX plus operational admin tooling in one codebase
Our Solution
We delivered a full-stack Next.js App Router application on Vercel, backed by Supabase (PostgreSQL, Auth, RLS). Public pages cover product storytelling, ISO download, USB/BIOS/install guides, B2B vertical pages, pricing, and checkout. After payment confirmation, the platform assigns an encrypted licence key and emails it via a provider-agnostic email service. Admins manage the full commerce loop from a protected dashboard.
Key Features
- Bilingual marketing site: Serbian primary, English secondary, structured content layer
- Licence commerce: Home / Pro / Business products, one licence per transaction
- Secure fulfilment: Encrypted keys + HMAC, server-only issuance, email delivery logs
- Payment adapter: Pluggable providers (mock for launch readiness; bank provider wired for production)
- Install journey: Download, create USB, how-to-install, and first-use guides
- B2B surfaces: Corporate, OEM, and medical industry pages
- Admin ops: Dashboard metrics, orders, licence inventory import, support inbox, blog CMS, email logs
- SEO & content: Locale-aware routing, sitemap, blog publishing workflow
Admin panel & operations
Operators get a role-gated admin area for revenue overview, order fulfilment (including licence resend), masked inventory management, support triage, blog editing, and email delivery audit.
Technical Implementation
- Frontend / app: Next.js (App Router), React, TypeScript, Tailwind CSS
- Backend: Next.js Route Handlers & Server Actions, Zod validation
- Data & auth: Supabase PostgreSQL, Supabase Auth, Row Level Security
- Commerce security: Server-only licence encryption, payment webhooks, audit logs
- Email: Provider abstraction (e.g. Resend) with delivery logging
- Hosting: Vercel (app) + Supabase (DB/auth)
Results & Impact
Shipped a production platform at crvena.rs that unifies brand storytelling, install guidance, and licence commerce - with an admin console for day-to-day operations. The architecture keeps sensitive fulfilment server-side and is ready for real bank payment integration without rewriting the shop flow.
