The website for a community organization in Vestland, where people from different backgrounds meet, take part and learn. I designed it, built it and still look after it.
Two sides of the same site: what visitors see, and the admin area the volunteers use to keep it alive without needing a developer for every change.
Content lives in Supabase (Postgres) with row-level security, so the team edits through the admin area and the database itself enforces who can read and change what. The schema grew through about 27 SQL migrations as new needs came in.
Form notifications and activity reminders go through Resend. The reminder job runs on a schedule, uses Norwegian time for its dates and is idempotent, so a retry never sends the same reminder twice.
Mangfoldsposten is published as a PDF. Instead of a download link only, the site renders it page by page with pdf.js and lets readers flip through it, with zoom, fullscreen and an archive of earlier editions.
Forms are validated with Zod on the server, and link fields such as external links and the Vipps link only accept real http(s) addresses before anything is saved.
In September I reviewed the whole site as if I were auditing someone else's work. These are the findings that mattered most.
A full review in September showed the navigation had no menu on phones at all. I added one, widened the breakpoint and moved it to a simpler native details/summary pattern.
The same review found that role checks let people through when a role could not be read. I changed them to fail closed, fixed the related database policies and added HTTP security headers, with regression tests so it stays fixed.
Automated axe scans flagged colour contrast, heading order and a missing landmark. I fixed all three, added visible focus rings, reduced-motion support and pause buttons for the moving carousel, and made the animated counters announce their final value to screen readers.
On phones with forced dark mode, the browser darkened the header and the logo vanished. The header now keeps a fixed light background so the logo is always visible.
Unit and regression tests run with Vitest, real browser checks with Playwright, and accessibility scans with axe. Dependencies are kept current, and production has no open npm audit findings.
I build websites for nonprofits, organizations and small businesses, and I stay around after launch. Tell me what you need and I'll answer honestly about what it takes.