Can I vibecode Linktree Pro?

Build a self-hosted, production-ready Linktree Pro replacement for a single creator/owner.

1. TECH STACK:
- Next.js (App Router) or Astro with SSR and API routes, Tailwind CSS, Lucide icons.
- SQLite (via Drizzle ORM / better-sqlite3) or Cloudflare D1.

2. SCREENS & INFORMATION ARCHITECTURE:
- Public Profile (`/` or custom domain): Instant-loading mobile-first page. Avatar, display name, bio, social icons, and customizable link buttons. Dynamic OpenGraph / SEO tags.
- Profile & Link Editor (`/admin`): Authenticated dashboard with drag-and-drop link reordering, title/URL editing, icon/emoji picker, toggle visibility, profile details, theme switcher (backgrounds, button shapes, fonts), and custom domain settings.
- Analytics Dashboard (`/admin/analytics`): Metrics breakdown for page views, total clicks, per-link click counts, CTR, and top referrers over 7/30 days.

3. DATA MODEL:
- `profiles`: id, username, display_name, bio, avatar_url, theme_config (JSON: bg_color, button_style, font_family), custom_domain, created_at, updated_at
- `links`: id, profile_id, title, url, icon, position (INT), is_enabled (BOOL), created_at
- `clicks`: id, link_id, referrer (TEXT), created_at

4. CORE USER JOURNEYS:
- Admin Flow: Log in via password or magic link -> configure theme & profile -> create/reorder links via drag-and-drop -> publish changes.
- Visitor Flow: Visit public page -> click link -> request goes to `/r/:id` -> async log click & 302 redirect to target URL.
- Analytics Flow: Log in -> view dashboard -> analyze top-performing links and traffic sources.

5. BUSINESS RULES & LOGIC:
- Link Drag-and-Drop: Reordering updates `position` indices sequentially.
- Click Deduplication: Deduplicate rapid clicks from the same session within 5 minutes.
- Custom Domain Setup: Map incoming `Host` header to profile with CNAME support.

6. AUTH & SECURITY:
- Auth: Single-owner auth using `ADMIN_PASSWORD` in `.env` with HTTP-only session cookie or magic link.
- Security: Rate-limit redirect routes (`/r/:id`), strict URL validation, zero user fingerprinting or IP storage (GDPR compliant).

7. NON-GOALS:
- Multi-tenant team roles, digital product sales/paywalls, payment integrations, or third-party marketplaces.

8. README REQUIREMENTS:
- Deployment guide for VPS (Docker/Node + Caddy/Nginx reverse proxy with auto SSL), `.env` config, and CNAME DNS setup.