<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: eli6</title>
    <description>The latest articles on DEV Community by eli6 (@eli6_4649fc5be59e2aeb2736).</description>
    <link>https://dev.to/eli6_4649fc5be59e2aeb2736</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3960374%2Fcf9a3084-d7f1-42d0-a490-3ddfbcfa8506.png</url>
      <title>DEV Community: eli6</title>
      <link>https://dev.to/eli6_4649fc5be59e2aeb2736</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/eli6_4649fc5be59e2aeb2736"/>
    <language>en</language>
    <item>
      <title>I built a free streaming site from scratch — no ads, no framework, no BS</title>
      <dc:creator>eli6</dc:creator>
      <pubDate>Sat, 30 May 2026 20:03:20 +0000</pubDate>
      <link>https://dev.to/eli6_4649fc5be59e2aeb2736/i-built-a-free-streaming-site-from-scratch-no-ads-no-framework-no-bs-32o6</link>
      <guid>https://dev.to/eli6_4649fc5be59e2aeb2736/i-built-a-free-streaming-site-from-scratch-no-ads-no-framework-no-bs-32o6</guid>
      <description>&lt;h2&gt;
  
  
  What I built
&lt;/h2&gt;

&lt;p&gt;&lt;a href="https://eli6movies.vercel.app" rel="noopener noreferrer"&gt;ELI6 Movies&lt;/a&gt; is a free streaming platform — films, shows, and anime. No sign-up wall, no ads, no subscription. You open it and things play.&lt;/p&gt;

&lt;p&gt;I wanted to prove you don't need React, a paid CDN, or $15/month to deliver a decent streaming experience.&lt;/p&gt;




&lt;h2&gt;
  
  
  Stack
&lt;/h2&gt;

&lt;div class="table-wrapper-paragraph"&gt;&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;Layer&lt;/th&gt;
&lt;th&gt;Tech&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;Frontend&lt;/td&gt;
&lt;td&gt;Vanilla JS + CSS (no framework)&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Backend&lt;/td&gt;
&lt;td&gt;Node.js + Express&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Database&lt;/td&gt;
&lt;td&gt;MongoDB (Mongoose)&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Hosting&lt;/td&gt;
&lt;td&gt;Vercel (frontend) + Render (backend)&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Metadata&lt;/td&gt;
&lt;td&gt;TMDB API&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Email&lt;/td&gt;
&lt;td&gt;Resend&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;&lt;/div&gt;




&lt;h2&gt;
  
  
  Things I'm proud of
&lt;/h2&gt;

&lt;p&gt;&lt;strong&gt;No framework on the frontend.&lt;/strong&gt; I went full vanilla — custom routing, component patterns, theme switching, all without a build step. The entire frontend deploys as static files.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;JWT with per-device session management.&lt;/strong&gt; Each login creates a session with a JTI (JWT ID). Users can see and revoke individual sessions from their profile — like Netflix's "sign out of all devices" but per-session.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Custom analytics dashboard.&lt;/strong&gt; No Google Analytics. I built my own: page views, daily chart, top pages, countries (via ip-api.com with a circuit breaker), device types, browser breakdown, referrers, and live active sessions. All stored in MongoDB.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Password reset + email verification&lt;/strong&gt; using Resend's HTTP API — no new npm dependencies, just native &lt;code&gt;fetch&lt;/code&gt;.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;GeoIP circuit breaker.&lt;/strong&gt; After 5 consecutive failures or a quota hit from ip-api.com, the system backs off for 5 minutes instead of hammering the free tier.&lt;/p&gt;




&lt;h2&gt;
  
  
  Things that bit me
&lt;/h2&gt;

&lt;p&gt;&lt;strong&gt;The &lt;code&gt;router.use(auth, adminOnly)&lt;/code&gt; trap.&lt;/strong&gt; Express's &lt;code&gt;router.use(fn)&lt;/code&gt; without a path prefix intercepts &lt;em&gt;all&lt;/em&gt; requests entering the router — not just the routes you defined. I had an analytics router with unscoped auth middleware that silently intercepted &lt;code&gt;/api/health&lt;/code&gt;, causing Render's health check to receive 401 on every deploy. The service rolled back with &lt;code&gt;update_failed&lt;/code&gt; in a loop for days. Fix was one line: &lt;code&gt;router.use('/admin/analytics', auth, adminOnly)&lt;/code&gt;.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;ua-parser-js v2 on Render.&lt;/strong&gt; The library crashing on import caused a crash loop. Replaced with 15 lines of inline regex.&lt;/p&gt;




&lt;h2&gt;
  
  
  What's live
&lt;/h2&gt;

&lt;ul&gt;
&lt;li&gt;Films, TV shows, anime&lt;/li&gt;
&lt;li&gt;Watchlist (synced to account)&lt;/li&gt;
&lt;li&gt;Resume watching&lt;/li&gt;
&lt;li&gt;Light/dark/system theme&lt;/li&gt;
&lt;li&gt;Mobile-friendly&lt;/li&gt;
&lt;li&gt;Admin analytics panel&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;&lt;strong&gt;Live at: &lt;a href="https://eli6movies.vercel.app" rel="noopener noreferrer"&gt;eli6movies.vercel.app&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Feedback welcome — roast the code, suggest features, or just tell me what's broken.&lt;/p&gt;

</description>
      <category>webdev</category>
      <category>javascript</category>
      <category>node</category>
      <category>showdev</category>
    </item>
  </channel>
</rss>
