@docupace/pipeline 1.0.77 → 1.0.78

package/src/auth0/configure.js

@@ -1,902 +1,902 @@
-import fs from 'fs-extra';
-import path from 'path';
-import axios from 'axios';
-import * as crypto from 'crypto';
-
-import {
-  cloneEnvRepository,
-  cloneRepository,
-  pushDeployConfig,
-  readDeployConfig,
-} from '../next/deploy.js';
-
-import { getVaultSecrets, updateVaultSecrets } from './vault.js';
-
-import {
-  coreSiteEnvMap,
-  environmentConfig,
-  getVaultSecretsConfigs,
-} from '../next/config.js';
-
-async function ensureDirectoryExists(dirPath) {
-  try {
-    await fs.promises.mkdir(dirPath, { recursive: true });
-    console.log(`Directory created or already exists: ${dirPath}`);
-  } catch (err) {
-    console.error(`Failed to create directory: ${err.message}`);
-  }
-}
-
-export async function getAuth0AuthToken(auth0Domain, clientId, clientSecret) {
-  try {
-    const response = await axios.post(
-      `https://${auth0Domain}/oauth/token`,
-      {
-        client_id: clientId,
-        client_secret: clientSecret,
-        audience: `https://${auth0Domain}/api/v2/`,
-        grant_type: 'client_credentials',
-      },
-      {
-        headers: {
-          'Content-Type': 'application/json',
-        },
-      },
-    );
-
-    const authToken = response.data.access_token;
-    // console.log("Auth0 Auth Token:", authToken);
-    return authToken;
-  } catch (error) {
-    console.error(
-      'Error fetching Auth0 token:',
-      error.response ? error.response.data : error.message,
-    );
-  }
-}
-
-async function configureUI(
-  siteHost,
-  coreURL,
-  connectURL,
-  docupaceHost,
-  site,
-  env,
-  auth0Domain,
-  auth0ClientId,
-  auth0ClientSecret,
-  auth0Token,
-  vaultSiteSecretsPath,
-  imageTag,
-  revision,
-  repoPath,
-  useS3,
-) {
-  console.log(
-    `Configuring UI for site: ${site} Host: ${siteHost} in env: ${env}`,
-  );
-  siteHost = siteHost.replace('https://', '');
-  coreURL = coreURL.replace('https://', '');
-  connectURL = connectURL.replace('https://', '');
-
-  try {
-    const auth0Response = await axios.get(
-      `https://${auth0Domain}/api/v2/clients`,
-      {
-        headers: { authorization: `Bearer ${auth0Token}` },
-      },
-    );
-
-    const uiClient = auth0Response.data.find(
-      (client) => client.name === 'docupace-ui-main',
-    );
-    const uiAuth0ClientId = uiClient.client_id;
-    const uiAuth0ClientSecret = uiClient.client_secret;
-
-    // Generate Auth0 Secret
-    const uiAuth0Secret = crypto
-      .randomBytes(48)
-      .toString('base64')
-      .replace(/[^a-zA-Z0-9]/g, '');
-
-    // Prepare data payload
-    console.log('Preparing Vault UI data payload...');
-    const uiSecretData = JSON.stringify({
-      data: {
-        AUTH0_CLIENT_ID: uiAuth0ClientId,
-        AUTH0_CLIENT_SECRET: uiAuth0ClientSecret,
-        AUTH0_SECRET: uiAuth0Secret,
-      },
-    });
-
-    await updateVaultSecrets(vaultSiteSecretsPath, uiSecretData);
-
-    let siteAWSSecrets = null;
-
-    if (useS3 === true || useS3 === 'true') {
-      const siteAWSSecretsPath = getVaultSecretsConfigs(site).awsSecretsPath;
-      siteAWSSecrets = await getVaultSecrets(siteAWSSecretsPath);
-      console.log(`siteAWSSecretsPath => ${siteAWSSecretsPath}`);
-    }
-
-    const awsS3Vars =
-      useS3 === true || useS3 === 'true'
-        ? `
-    AWS_ACCESS_KEY_ID: vault:secret/data/${site}/aws/config#AWS_ACCESS_KEY_ID
-    AWS_BUCKET_NAME: vault:secret/data/${site}/aws/config#AWS_BUCKET_NAME
-    AWS_SECRET_ACCESS_KEY: vault:secret/data/${site}/aws/config#AWS_SECRET_ACCESS_KEY
-    AWS_REGION: vault:secret/data/${site}/aws/config#AWS_REGION`
-        : '';
-
-    // Prepare ui.app.yaml
-    const uiAppYaml = `
-repo: docupace-ui-main
-revision: ${revision}
-`.trim();
-
-    // Prepare ui.values.yaml
-    const uiValuesYaml = `
-uiMain:
-  auth0BaseUrl: https://${siteHost}
-  auth0IssuerBaseUrl: https://${auth0Domain}
-  auth0ClientId: vault:secret/data/${site}/ui/config#AUTH0_CLIENT_ID
-  graphqlClientUrl: https://${siteHost}/api/graphql
-  graphqlServerUrl: https://${siteHost}/api/graphql
-  connectUrl: https://${connectURL}
-  coreUrl: https://${coreURL}
-  env:
-    AUTH0_CLIENT_SECRET: vault:secret/data/${site}/ui/config#AUTH0_CLIENT_SECRET
-    AUTH0_SECRET: vault:secret/data/${site}/ui/config#AUTH0_SECRET${awsS3Vars ? '\n    ' + awsS3Vars.trim() : ''}
-image:
-  repository: registry.paperout.com/docupace-ui-main-${env}-docker-local/enterprise-ui-app
-  tag: ${imageTag}
-${
-  useS3 === true || useS3 === 'true'
-    ? `
-serviceAccount:
-  create: true
-  annotations:
-    "helm.sh/hook": pre-install
-    "helm.sh/hook-weight": "-10"
-    eks.amazonaws.com/role-arn: arn:aws:iam::${siteAWSSecrets.AWS_ACCOUNT_ID}:role/eks-pod-identity-connect-next-${env}-${site}-bucket`
-    : ''
-}
-imagePullSecrets:
-  - name: jf-artifactory
-ingress:
-  enabled: true
-  className: nginx
-  annotations:
-    external-dns.alpha.kubernetes.io/hostname: ${siteHost}
-    external-dns.alpha.kubernetes.io/zone: public
-    cert-manager.io/cluster-issuer: letsencrypt
-    nginx.ingress.kubernetes.io/proxy-buffer-size: 128k
-  hosts:
-    - host: ${siteHost}
-      paths:
-        - path: /
-          pathType: Prefix
-  tls:
-    - hosts:
-        - ${siteHost}
-      secretName: dp-next-ui-cert
-externalConnectIngress:
-  enabled: true
-  className: nginx
-  annotations:
-    cert-manager.io/cluster-issuer: letsencrypt
-    external-dns.alpha.kubernetes.io/hostname: ${siteHost}
-    external-dns.alpha.kubernetes.io/zone: public
-    nginx.ingress.kubernetes.io/backend-protocol: HTTPS
-    nginx.ingress.kubernetes.io/configuration-snippet: |
-      proxy_set_header Host ${siteHost};
-    nginx.ingress.kubernetes.io/proxy-buffer-size: 8k
-  hosts:
-    - host: ${siteHost}
-      paths:
-        - path: /core
-        - path: /core_b2b
-        - path: /core_reports
-        - path: /corerealm
-        - path: /connect
-        - path: /webstart
-        - path: /core_ws
-        - path: /core_docupload
-        - path: /core_ariws
-        - path: /core_restws
-        - path: /core_webdav
-  tls:
-    - hosts:
-        - ${siteHost}
-      secretName: dp-next-ui-cert
-externalConnectService:
-  enabled: true
-  name: external-connect
-  domain: ${docupaceHost}
-`.trim();
-
-    console.log('Writing configuration files...');
-    await ensureDirectoryExists(path.resolve(`${repoPath}/dp/${site}`));
-
-    await fs.writeFile(
-      `${repoPath}/dp/${site}/ui.app.yaml`,
-      uiAppYaml,
-      (err) => {
-        if (err) {
-          console.error('Failed to write the file:', err);
-        } else {
-          console.log(
-            `File ${repoPath}/dp/${site}/ui.app.yaml written successfully.`,
-          );
-        }
-      },
-    );
-
-    await fs.writeFile(
-      `${repoPath}/dp/${site}/ui.values.yaml`,
-      uiValuesYaml,
-      (err) => {
-        if (err) {
-          console.error('Failed to write the file:', err);
-        } else {
-          console.log(
-            `File ${repoPath}/dp/${site}/ui.values.yaml written successfully.`,
-          );
-        }
-      },
-    );
-    console.log('The UI part is done!');
-  } catch (error) {
-    console.error('Error configuring UI:', error);
-  }
-}
-
-async function configureCCUI(
-  siteHost,
-  coreURL,
-  connectURL,
-  docupaceHost,
-  site,
-  env,
-  auth0Domain,
-  auth0ClientId,
-  auth0ClientSecret,
-  auth0Token,
-  vaultSiteSecretsPath,
-  imageTag,
-  revision,
-  repoPath,
-  useS3,
-  ccUrl,
-) {
-  console.log(
-    `Configuring CC UI for site: ${site} Host: ${siteHost} in env: ${env}`,
-  );
-  siteHost = siteHost.replace('https://', '');
-  coreURL = coreURL.replace('https://', '');
-  connectURL = connectURL.replace('https://', '');
-  ccUrl = ccUrl.replace('https://', '');
-
-  try {
-    const auth0Response = await axios.get(
-      `https://${auth0Domain}/api/v2/clients`,
-      {
-        headers: { authorization: `Bearer ${auth0Token}` },
-      },
-    );
-
-    const uiClient = auth0Response.data.find(
-      (client) => client.name === 'docupace-ui-cc',
-    );
-    const uiAuth0ClientId = uiClient.client_id;
-    const uiAuth0ClientSecret = uiClient.client_secret;
-
-    // Generate Auth0 Secret
-    const uiAuth0Secret = crypto
-      .randomBytes(48)
-      .toString('base64')
-      .replace(/[^a-zA-Z0-9]/g, '');
-
-    // Prepare data payload
-    console.log('Preparing Vault CC UI data payload...');
-    const ccUISecretData = JSON.stringify({
-      data: {
-        AUTH0_CLIENT_ID: uiAuth0ClientId,
-        AUTH0_CLIENT_SECRET: uiAuth0ClientSecret,
-        AUTH0_SECRET: uiAuth0Secret,
-      },
-    });
-    console.log('Updating Vault Site Secret =>', vaultSiteSecretsPath);
-    await updateVaultSecrets(vaultSiteSecretsPath, ccUISecretData);
-
-    let siteAWSSecrets = null;
-
-    if (useS3 === true || useS3 === 'true') {
-      const siteAWSSecretsPath = getVaultSecretsConfigs(site).awsSecretsPath;
-      siteAWSSecrets = await getVaultSecrets(siteAWSSecretsPath);
-      console.log(`siteAWSSecretsPath => ${siteAWSSecretsPath}`);
-    }
-
-    const awsS3Vars =
-      useS3 === true || useS3 === 'true'
-        ? `
-    AWS_ACCESS_KEY_ID: vault:secret/data/${site}/aws/config#AWS_ACCESS_KEY_ID
-    AWS_BUCKET_NAME: vault:secret/data/${site}/aws/config#AWS_BUCKET_NAME
-    AWS_SECRET_ACCESS_KEY: vault:secret/data/${site}/aws/config#AWS_SECRET_ACCESS_KEY
-    AWS_REGION: vault:secret/data/${site}/aws/config#AWS_REGION`
-        : '';
-
-    const uiCCAppYaml = `
-repo: docupace-ui-main
-revision: ${revision}
-`.trim();
-
-    const uiCCValuesYaml = `
-uiMain:
-  auth0BaseUrl: https://${ccUrl}
-  auth0IssuerBaseUrl: https://${auth0Domain}
-  auth0ClientId: vault:secret/data/${site}/ui-cc/config#AUTH0_CLIENT_ID
-  graphqlClientUrl: https://${siteHost}/api/graphql
-  graphqlServerUrl: https://${siteHost}/api/graphql
-  connectUrl: https://${connectURL}
-  coreUrl: https://${coreURL}
-  env:
-    AUTH0_AUDIENCE: core-api-access
-    AUTH0_CLIENT_SECRET: vault:secret/data/${site}/ui-cc/config#AUTH0_CLIENT_SECRET
-    AUTH0_SECRET: vault:secret/data/${site}/ui-cc/config#AUTH0_SECRET${awsS3Vars ? '\n    ' + awsS3Vars.trim() : ''}
-image:
-  repository: registry.paperout.com/docupace-ui-main-${env}-docker-local/cc-ui-app
-  tag: ${imageTag}
-imagePullSecrets:
-  - name: jf-artifactory
-ingress:
-  enabled: true
-  className: nginx
-  annotations:
-    external-dns.alpha.kubernetes.io/hostname: ${ccUrl}
-    external-dns.alpha.kubernetes.io/zone: public
-    cert-manager.io/cluster-issuer: letsencrypt
-    nginx.ingress.kubernetes.io/proxy-buffer-size: 128k
-  hosts:
-    - host: ${ccUrl}
-      paths:
-        - path: /
-          pathType: Prefix
-  tls:
-    - hosts:
-        - ${ccUrl}
-      secretName: dp-cc-ui-cert
-${
-  useS3 === true || useS3 === 'true'
-    ? `
-serviceAccount:
-  create: true
-  annotations:
-    "helm.sh/hook": pre-install
-    "helm.sh/hook-weight": "-10"
-    eks.amazonaws.com/role-arn: arn:aws:iam::${siteAWSSecrets.AWS_ACCOUNT_ID}:role/eks-pod-identity-connect-next-${env}-${site}-bucket`
-    : ''
-}
-`.trim();
-
-    console.log('Writing configuration files...');
-    await ensureDirectoryExists(path.resolve(`${repoPath}/dp/${site}`));
-
-    await fs.writeFile(
-      `${repoPath}/dp/${site}/cc.app.yaml`,
-      uiCCAppYaml,
-      (err) => {
-        if (err) {
-          console.error(
-            `Failed to write ${repoPath}/dp/${site}/cc.app.yaml file:`,
-            err,
-          );
-        } else {
-          console.log(
-            `File ${repoPath}/dp/${site}/cc.app.yaml written successfully.`,
-          );
-        }
-      },
-    );
-
-    await fs.writeFile(
-      `${repoPath}/dp/${site}/cc.values.yaml`,
-      uiCCValuesYaml,
-      (err) => {
-        if (err) {
-          console.error(
-            `Failed to write ${repoPath}/dp/${site}/cc.values.yaml file:`,
-            err,
-          );
-        } else {
-          console.log(
-            `File ${repoPath}/dp/${site}/cc.values.yaml written successfully.`,
-          );
-        }
-      },
-    );
-    console.log('CC-UI configuration is done!');
-  } catch (error) {
-    console.error('Error configuring CC-UI:', error);
-  }
-}
-
-export async function cleanAndWritePropertiesFile(configPath, content) {
-  try {
-    const cleanedContent = content
-      .split('\n')
-      .map((line) => line.trim())
-      .filter((line) => line !== '')
-      .join('\n');
-
-    await fs.writeFile(configPath, cleanedContent, 'utf8');
-    console.log(`Cleaned and written file to: ${configPath}`);
-  } catch (error) {
-    console.error(
-      `Error writing properties file to ${configPath}:`,
-      error.message,
-    );
-    process.exit(1);
-  }
-}
-
-export async function updateCoreSiteConfig(site, env, useS3Ui, useS3Gq) {
-  try {
-    const coreSiteEnv = coreSiteEnvMap[env];
-
-    const coreSiteConfigRepoPath = await cloneRepository(
-      `${coreSiteEnv}-site-settings`,
-    );
-
-    const configPath = path.join(
-      `${coreSiteEnv}-site-settings`,
-      site.toUpperCase(),
-      'docucore-nextUI.properties',
-    );
-
-    let siteAWSSecrets = null;
-
-    if (
-      useS3Ui === true ||
-      useS3Ui === 'true' ||
-      useS3Gq === true ||
-      useS3Gq === 'true'
-    ) {
-      const siteAWSSecretsPath = getVaultSecretsConfigs(site).awsSecretsPath;
-      siteAWSSecrets = await getVaultSecrets(siteAWSSecretsPath);
-      console.log(`siteAWSSecretsPath => ${siteAWSSecretsPath}`);
-    }
-
-    const coreSiteConfig = `
-        ${
-          siteAWSSecrets
-            ? `
-com.docupace.imports.files.FilesImportConfig.aws.accessKeyId=${siteAWSSecrets.AWS_ACCESS_KEY_ID}
-com.docupace.imports.files.FilesImportConfig.aws.accessKeySecret=${siteAWSSecrets.AWS_SECRET_ACCESS_KEY}
-com.docupace.imports.files.FilesImportConfig.aws.region=${siteAWSSecrets.AWS_REGION}`.trim()
-            : ''
-        }
-`;
-
-    await fs.ensureDir(path.join(coreSiteConfigRepoPath, site.toUpperCase()));
-    await cleanAndWritePropertiesFile(configPath, coreSiteConfig);
-    await pushDeployConfig(
-      coreSiteConfigRepoPath,
-      `Core config: docucore-nextUI.properties for site: (${site.toUpperCase()}) update in env: (${env})`,
-    );
-  } catch (error) {
-    console.error('Error:', error.message);
-    process.exit(1);
-  }
-}
-
-async function configureGraphQLServer(
-  siteHost,
-  coreURL,
-  docupaceHost,
-  site,
-  env,
-  auth0Domain,
-  auth0ClientId,
-  auth0ClientSecret,
-  auth0Token,
-  vaultSiteSecretsPath,
-  imageTag,
-  revision,
-  standardConfigRemoteBranch,
-  repoPath,
-  commonSecrets,
-  useS3,
-) {
-  siteHost = siteHost.replace('https://', '');
-  coreURL = coreURL.replace('https://', '');
-  console.log(
-    `Configuring GraphQL Server for site: ${site} Host: ${siteHost} in env: ${env}`,
-  );
-
-  try {
-    const auth0Response = await axios.get(
-      `https://${auth0Domain}/api/v2/clients`,
-      {
-        headers: { authorization: `Bearer ${auth0Token}` },
-      },
-    );
-
-    const graphQLServerClient = auth0Response.data.find(
-      (client) => client.name === 'docupace-graphql',
-    );
-    const graphQLServerClientCredentials = auth0Response.data.find(
-      (client) => client.name === 'docupace-graphql-client-credentials',
-    );
-
-    const graphQLServerAuth0ClientId = graphQLServerClient.client_id;
-    const graphQLServerAuth0ClientSecret = graphQLServerClient.client_secret;
-
-    const graphQLServerCCAuth0ClientId =
-      graphQLServerClientCredentials.client_id;
-    const graphQLServerCCAuth0ClientSecret =
-      graphQLServerClientCredentials.client_secret;
-
-    // Prepare data payload
-    console.log('Preparing Vault GraphQL Server data payload...');
-    const graphQLServerSecretData = JSON.stringify({
-      data: {
-        AUTH0_CLIENT_ID: graphQLServerAuth0ClientId,
-        AUTH0_CLIENT_SECRET: graphQLServerAuth0ClientSecret,
-        AUTH0_CC_CLIENT_ID: graphQLServerCCAuth0ClientId,
-        AUTH0_CC_CLIENT_SECRET: graphQLServerCCAuth0ClientSecret,
-        CORE_PASSWORD: commonSecrets.CORE_PASSWORD,
-        REMOTE_CONFIG_PATH: commonSecrets.REMOTE_CONFIG_PATH,
-        STANDARD_CONFIG_REMOTE_PATH: commonSecrets.STANDARD_CONFIG_REMOTE_PATH,
-      },
-    });
-
-    await updateVaultSecrets(vaultSiteSecretsPath, graphQLServerSecretData);
-
-    let siteAWSSecrets = null;
-
-    if (useS3 === true || useS3 === 'true') {
-      const siteAWSSecretsPath = getVaultSecretsConfigs(site).awsSecretsPath;
-      siteAWSSecrets = await getVaultSecrets(siteAWSSecretsPath);
-      console.log(`siteAWSSecretsPath => ${siteAWSSecretsPath}`);
-    }
-
-    const awsS3Vars =
-      useS3 === true || useS3 === 'true'
-        ? `
-    AWS_ACCESS_KEY_ID: vault:secret/data/${site}/aws/config#AWS_ACCESS_KEY_ID
-    AWS_S3_BUCKET_NAME: vault:secret/data/${site}/aws/config#AWS_BUCKET_NAME
-    AWS_SECRET_ACCESS_KEY: vault:secret/data/${site}/aws/config#AWS_SECRET_ACCESS_KEY
-    AWS_REGION: vault:secret/data/${site}/aws/config#AWS_REGION`.trim()
-        : '';
-    // Prepare graphql-server.app.yaml
-    const graphQLServerAppYaml = `
-repo: docupace-graphql-server
-revision: ${revision}
-`.trim();
-
-    // Prepare graphql-server.values.yaml
-    const graphQLServerValuesYaml = `
-graphqlServer:
-  auth0Domain: https://${auth0Domain}
-  auth0ClientId: vault:secret/data/${site}/graphql-server/config#AUTH0_CLIENT_ID
-  auth0Audience: ${commonSecrets.CORE_API_IDENTIFIER}
-  baseUrl: https://${siteHost}/api/graphql
-  coreUrl: https://${coreURL}
-  integrationHubUrl: "https://${commonSecrets.INTEGRATION_HUB_URL}"
-  standardConfigRemoteBranch: ${standardConfigRemoteBranch}
-  apiLevel: "2"
-  env:
-    AUTH0_CLIENT_SECRET: vault:secret/data/${site}/graphql-server/config#AUTH0_CLIENT_SECRET
-    STANDARD_CONFIG_REMOTE_PATH: vault:secret/data/common/config#STANDARD_CONFIG_REMOTE_PATH
-    SITE_CONFIG_REMOTE_PATH: vault:secret/data/${site}/common/config#SITE_CONFIG_REMOTE_PATH
-    AUTH0_CC_CLIENT_ID: vault:secret/data/${site}/graphql-server/config#AUTH0_CC_CLIENT_ID
-    AUTH0_CC_CLIENT_SECRET: vault:secret/data/${site}/graphql-server/config#AUTH0_CC_CLIENT_SECRET${awsS3Vars ? '\n    ' + awsS3Vars.trim() : ''}
-${
-  useS3 === true || useS3 === 'true'
-    ? `
-serviceAccount:
-  create: true
-  annotations:
-    "helm.sh/hook": pre-install
-    "helm.sh/hook-weight": "-10"
-    eks.amazonaws.com/role-arn: arn:aws:iam::${siteAWSSecrets.AWS_ACCOUNT_ID}:role/eks-pod-identity-connect-next-${env}-${site}-bucket`.trim()
-    : ''
-}
-image:
-  repository: registry.paperout.com/docupace-graphql-server-${env}-docker-local/docupace-graphql-server
-  tag: ${imageTag}
-imagePullSecrets:
-  - name: jf-artifactory
-ingress:
-  annotations:
-    external-dns.alpha.kubernetes.io/hostname: ${siteHost}
-    external-dns.alpha.kubernetes.io/zone: public
-    cert-manager.io/cluster-issuer: letsencrypt
-    nginx.ingress.kubernetes.io/proxy-buffer-size: 128k
-  enabled: true
-  className: nginx
-  hosts:
-    - host: ${siteHost}
-      paths:
-        - path: /api/graphql
-          pathType: Prefix
-  tls:
-    - hosts:
-        - ${siteHost}
-      secretName: dp-next-ui-cert`.trim();
-
-    // Write configuration files
-    console.log('Writing ArgoCD GraphQL Server configuration files...');
-    await ensureDirectoryExists(path.resolve(`${repoPath}/dp/${site}`));
-
-    await fs.writeFile(
-      `${repoPath}/dp/${site}/graphql-server.app.yaml`,
-      graphQLServerAppYaml,
-      (err) => {
-        if (err) {
-          console.error('Failed to write the file:', err);
-        } else {
-          console.log('File written successfully.');
-        }
-      },
-    );
-
-    await fs.writeFile(
-      `${repoPath}/dp/${site}/graphql-server.values.yaml`,
-      graphQLServerValuesYaml,
-      (err) => {
-        if (err) {
-          console.error(
-            `Failed to write ${repoPath}/dp/${site}/graphql-server.values.yaml file:`,
-            err,
-          );
-        } else {
-          console.log(
-            `File ${repoPath}/dp/${site}/graphql-server.values.yaml written successfully.`,
-          );
-        }
-      },
-    );
-    console.log('GraphQL Server configuration is done!');
-  } catch (error) {
-    console.error('Error configuring GraphQL Server:', error);
-  }
-}
-
-export async function configureFromSite(
-  fromSite,
-  toSite,
-  fromEnv,
-  toEnv,
-  deployUI,
-  deployGraphQLServer,
-  useNewDomain,
-  useS3Ui,
-  deployCCUI,
-  useS3Gq,
-  auth0Tenant,
-) {
-  console.log(
-    `Configuring Auth0 tenants and ArgoCD apps for site: ${toSite} in env: ${toEnv} from site: ${fromSite}`,
-  );
-  // Common Secrets
-  const commonSecretsPath = getVaultSecretsConfigs(toSite).commonSecretsPath;
-  console.log(`commonSecretsPath => ${commonSecretsPath}`);
-  const commonSecrets = await getVaultSecrets(commonSecretsPath);
-
-  // Site Common Secrets
-  const siteCommonSecretsPath =
-    getVaultSecretsConfigs(toSite).siteCommonSecretsPath;
-  console.log(`siteCommonSecretsPath => ${siteCommonSecretsPath}`);
-  const siteCommonSecrets = await getVaultSecrets(siteCommonSecretsPath);
-  let auth0Domain;
-  if (auth0Tenant === '') {
-    auth0Domain = `docupace-${toEnv}-${toSite}.us.auth0.com`;
-  } else {
-    auth0Domain = `${auth0Tenant}.us.auth0.com`;
-  }
-
-  const auth0ClientId = siteCommonSecrets.AUTH0_CLIENT_ID;
-  const auth0ClientSecret = siteCommonSecrets.AUTH0_CLIENT_SECRET;
-  const auth0Token = await getAuth0AuthToken(
-    auth0Domain,
-    auth0ClientId,
-    auth0ClientSecret,
-  );
-
-  // UI MAIN app
-  const uiSecretsPath = getVaultSecretsConfigs(toSite).uiSecretsPath;
-  console.log(`uiSecretsPath => ${uiSecretsPath}`);
-
-  // UI CC app
-  const ccUISecretsPath = getVaultSecretsConfigs(toSite).ccUISecretsPath;
-  console.log(`ccUISecretsPath => ${ccUISecretsPath}`);
-
-  // GraphQL-Server app
-  const graphqlSecretsPath =
-    getVaultSecretsConfigs(toSite).graphqlServerSecretsPath;
-  console.log(`graphqlSecretsPath => ${graphqlSecretsPath}`);
-
-  let repoPathFromEnv = '';
-  let repoPathToEnv = '';
-  // Clone repositories
-  if (fromEnv === toEnv) {
-    repoPathFromEnv = await cloneEnvRepository(fromEnv);
-    repoPathToEnv = repoPathFromEnv;
-  } else {
-    repoPathFromEnv = await cloneEnvRepository(fromEnv);
-    repoPathToEnv = await cloneEnvRepository(toEnv);
-  }
-
-  //TODO: clone fromEnv and toEnv. replace above with this
-
-  // const auth0RepoPath = await cloneRepository('auth0-site-setup');
-  let uiImageTag, uiRevision;
-  if (deployUI === true || deployUI === 'true') {
-    // Read deploy configs
-    const { deployConfig: deployUIConfig } = await readDeployConfig(
-      'ui',
-      fromEnv,
-      fromSite,
-      'values',
-    );
-    const { deployConfig: deployUiRevisionConfig } = await readDeployConfig(
-      'ui',
-      fromEnv,
-      fromSite,
-      'app',
-    );
-
-    uiImageTag = deployUIConfig.image.tag;
-    uiRevision = deployUiRevisionConfig.revision;
-
-    console.log(`Copying Latest UI Revision: ${uiRevision}`);
-  }
-
-  let ccImageTag, ccRevision;
-  if (deployCCUI === true || deployCCUI === 'true') {
-    const { deployConfig: deployCCConfig } = await readDeployConfig(
-      'cc',
-      fromEnv,
-      fromSite,
-      'values',
-    );
-
-    const { deployConfig: deployCCRevisionConfig } = await readDeployConfig(
-      'cc',
-      fromEnv,
-      fromSite,
-      'app',
-    );
-
-    ccImageTag = deployCCConfig.image.tag;
-    ccRevision = deployCCRevisionConfig.revision;
-
-    console.log(`Copying Latest CC Revision: ${ccRevision}`);
-  }
-
-  const { deployConfig: deployGraphQLServerConfig } = await readDeployConfig(
-    'graphql-server',
-    fromEnv,
-    fromSite,
-    'values',
-  );
-
-  const { deployConfig: deployGraphQLServerRevisionConfig } =
-    await readDeployConfig('graphql-server', fromEnv, fromSite, 'app');
-
-  const gqRevision = deployGraphQLServerRevisionConfig.revision;
-
-  console.log(`Copying Latest GQ Server Revision: ${gqRevision}`);
-
-  const graphqlImageTag = deployGraphQLServerConfig.image.tag;
-  const graphqlStandardConfigRemoteBranch =
-    deployGraphQLServerConfig.graphqlServer.standardConfigRemoteBranch;
-
-  if (deployUI === true || deployUI === 'true') {
-    console.log(
-      `Copying Latest UI Image Tag: ${uiImageTag} from site: ${fromSite} to site: ${toSite}`,
-    );
-  }
-
-  if (deployCCUI === true || deployCCUI === 'true') {
-    console.log(
-      `Copying Latest CC-UI Image Tag: ${ccImageTag} from site: ${fromSite} to site: ${toSite}`,
-    );
-  }
-
-  console.log(
-    `Copying Latest GraphQL Server Image Tag: ${deployGraphQLServerConfig.image.tag} from site: ${fromSite} to site: ${toSite}`,
-  );
-
-  const envConfig = environmentConfig[toEnv];
-
-  let CORE_URL, SITE_HOST, CORE_API_CONTEXT, CONNECT_URL, DOCUPACE_HOST;
-  const newUrl = envConfig.newUrl(toSite);
-  const ccUrl = envConfig.ccUrl(toSite);
-
-  SITE_HOST = `${newUrl}`;
-
-  if (useNewDomain === true || useNewDomain === 'true') {
-    const newUrl = envConfig.newUrl(toSite);
-    CORE_URL = `${newUrl}/core`;
-    // SITE_HOST = newUrl;
-    CORE_API_CONTEXT = 'core';
-    CONNECT_URL = `${newUrl}/connect`;
-    DOCUPACE_HOST = envConfig.docupaceHost();
-  } else {
-    const oldUrl = envConfig.oldUrl(toSite);
-    CORE_URL = oldUrl;
-    // SITE_HOST = oldUrl;
-    CORE_API_CONTEXT = toSite;
-    CONNECT_URL = `${oldUrl}_ui`;
-  }
-
-  if (deployUI === true || deployUI === 'true') {
-    await configureUI(
-      SITE_HOST,
-      CORE_URL,
-      CONNECT_URL,
-      DOCUPACE_HOST,
-      toSite,
-      toEnv,
-      auth0Domain,
-      auth0ClientId,
-      auth0ClientSecret,
-      auth0Token,
-      uiSecretsPath,
-      uiImageTag,
-      uiRevision,
-      repoPathToEnv,
-      useS3Ui,
-    );
-  }
-
-  if (deployCCUI === true || deployCCUI === 'true') {
-    await configureCCUI(
-      SITE_HOST,
-      CORE_URL,
-      CONNECT_URL,
-      DOCUPACE_HOST,
-      toSite,
-      toEnv,
-      auth0Domain,
-      auth0ClientId,
-      auth0ClientSecret,
-      auth0Token,
-      ccUISecretsPath,
-      ccImageTag,
-      ccRevision,
-      repoPathToEnv,
-      useS3Ui,
-      ccUrl,
-    );
-  }
-
-  await configureGraphQLServer(
-    SITE_HOST,
-    CORE_URL,
-    DOCUPACE_HOST,
-    toSite,
-    toEnv,
-    auth0Domain,
-    auth0ClientId,
-    auth0ClientSecret,
-    auth0Token,
-    graphqlSecretsPath,
-    graphqlImageTag,
-    gqRevision,
-    graphqlStandardConfigRemoteBranch,
-    repoPathToEnv,
-    commonSecrets,
-    useS3Gq,
-  );
-
-  console.log('Updating Core Site Config...');
-  await updateCoreSiteConfig(toSite, toEnv, useS3Ui, useS3Gq);
-  await pushDeployConfig(
-    repoPathToEnv,
-    `Config update for ${toSite} from ${fromSite} GraphQL: ${graphqlImageTag}`,
-  );
-}
+import fs from 'fs-extra';
+import path from 'path';
+import axios from 'axios';
+import * as crypto from 'crypto';
+
+import {
+  cloneEnvRepository,
+  cloneRepository,
+  pushDeployConfig,
+  readDeployConfig,
+} from '../next/deploy.js';
+
+import { getVaultSecrets, updateVaultSecrets } from './vault.js';
+
+import {
+  coreSiteEnvMap,
+  environmentConfig,
+  getVaultSecretsConfigs,
+} from '../next/config.js';
+
+async function ensureDirectoryExists(dirPath) {
+  try {
+    await fs.promises.mkdir(dirPath, { recursive: true });
+    console.log(`Directory created or already exists: ${dirPath}`);
+  } catch (err) {
+    console.error(`Failed to create directory: ${err.message}`);
+  }
+}
+
+export async function getAuth0AuthToken(auth0Domain, clientId, clientSecret) {
+  try {
+    const response = await axios.post(
+      `https://${auth0Domain}/oauth/token`,
+      {
+        client_id: clientId,
+        client_secret: clientSecret,
+        audience: `https://${auth0Domain}/api/v2/`,
+        grant_type: 'client_credentials',
+      },
+      {
+        headers: {
+          'Content-Type': 'application/json',
+        },
+      },
+    );
+
+    const authToken = response.data.access_token;
+    // console.log("Auth0 Auth Token:", authToken);
+    return authToken;
+  } catch (error) {
+    console.error(
+      'Error fetching Auth0 token:',
+      error.response ? error.response.data : error.message,
+    );
+  }
+}
+
+async function configureUI(
+  siteHost,
+  coreURL,
+  connectURL,
+  docupaceHost,
+  site,
+  env,
+  auth0Domain,
+  auth0ClientId,
+  auth0ClientSecret,
+  auth0Token,
+  vaultSiteSecretsPath,
+  imageTag,
+  revision,
+  repoPath,
+  useS3,
+) {
+  console.log(
+    `Configuring UI for site: ${site} Host: ${siteHost} in env: ${env}`,
+  );
+  siteHost = siteHost.replace('https://', '');
+  coreURL = coreURL.replace('https://', '');
+  connectURL = connectURL.replace('https://', '');
+
+  try {
+    const auth0Response = await axios.get(
+      `https://${auth0Domain}/api/v2/clients`,
+      {
+        headers: { authorization: `Bearer ${auth0Token}` },
+      },
+    );
+
+    const uiClient = auth0Response.data.find(
+      (client) => client.name === 'docupace-ui-main',
+    );
+    const uiAuth0ClientId = uiClient.client_id;
+    const uiAuth0ClientSecret = uiClient.client_secret;
+
+    // Generate Auth0 Secret
+    const uiAuth0Secret = crypto
+      .randomBytes(48)
+      .toString('base64')
+      .replace(/[^a-zA-Z0-9]/g, '');
+
+    // Prepare data payload
+    console.log('Preparing Vault UI data payload...');
+    const uiSecretData = JSON.stringify({
+      data: {
+        AUTH0_CLIENT_ID: uiAuth0ClientId,
+        AUTH0_CLIENT_SECRET: uiAuth0ClientSecret,
+        AUTH0_SECRET: uiAuth0Secret,
+      },
+    });
+
+    await updateVaultSecrets(vaultSiteSecretsPath, uiSecretData);
+
+    let siteAWSSecrets = null;
+
+    if (useS3 === true || useS3 === 'true') {
+      const siteAWSSecretsPath = getVaultSecretsConfigs(site).awsSecretsPath;
+      siteAWSSecrets = await getVaultSecrets(siteAWSSecretsPath);
+      console.log(`siteAWSSecretsPath => ${siteAWSSecretsPath}`);
+    }
+
+    const awsS3Vars =
+      useS3 === true || useS3 === 'true'
+        ? `
+    AWS_ACCESS_KEY_ID: vault:secret/data/${site}/aws/config#AWS_ACCESS_KEY_ID
+    AWS_BUCKET_NAME: vault:secret/data/${site}/aws/config#AWS_BUCKET_NAME
+    AWS_SECRET_ACCESS_KEY: vault:secret/data/${site}/aws/config#AWS_SECRET_ACCESS_KEY
+    AWS_REGION: vault:secret/data/${site}/aws/config#AWS_REGION`
+        : '';
+
+    // Prepare ui.app.yaml
+    const uiAppYaml = `
+repo: docupace-ui-main
+revision: ${revision}
+`.trim();
+
+    // Prepare ui.values.yaml
+    const uiValuesYaml = `
+uiMain:
+  auth0BaseUrl: https://${siteHost}
+  auth0IssuerBaseUrl: https://${auth0Domain}
+  auth0ClientId: vault:secret/data/${site}/ui/config#AUTH0_CLIENT_ID
+  graphqlClientUrl: https://${siteHost}/api/graphql
+  graphqlServerUrl: https://${siteHost}/api/graphql
+  connectUrl: https://${connectURL}
+  coreUrl: https://${coreURL}
+  env:
+    AUTH0_CLIENT_SECRET: vault:secret/data/${site}/ui/config#AUTH0_CLIENT_SECRET
+    AUTH0_SECRET: vault:secret/data/${site}/ui/config#AUTH0_SECRET${awsS3Vars ? '\n    ' + awsS3Vars.trim() : ''}
+image:
+  repository: registry.paperout.com/docupace-ui-main-${env}-docker-local/enterprise-ui-app
+  tag: ${imageTag}
+${
+  useS3 === true || useS3 === 'true'
+    ? `
+serviceAccount:
+  create: true
+  annotations:
+    "helm.sh/hook": pre-install
+    "helm.sh/hook-weight": "-10"
+    eks.amazonaws.com/role-arn: arn:aws:iam::${siteAWSSecrets.AWS_ACCOUNT_ID}:role/eks-pod-identity-connect-next-${env}-${site}-bucket`
+    : ''
+}
+imagePullSecrets:
+  - name: jf-artifactory
+ingress:
+  enabled: true
+  className: nginx
+  annotations:
+    external-dns.alpha.kubernetes.io/hostname: ${siteHost}
+    external-dns.alpha.kubernetes.io/zone: public
+    cert-manager.io/cluster-issuer: letsencrypt
+    nginx.ingress.kubernetes.io/proxy-buffer-size: 128k
+  hosts:
+    - host: ${siteHost}
+      paths:
+        - path: /
+          pathType: Prefix
+  tls:
+    - hosts:
+        - ${siteHost}
+      secretName: dp-next-ui-cert
+externalConnectIngress:
+  enabled: true
+  className: nginx
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt
+    external-dns.alpha.kubernetes.io/hostname: ${siteHost}
+    external-dns.alpha.kubernetes.io/zone: public
+    nginx.ingress.kubernetes.io/backend-protocol: HTTPS
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      proxy_set_header Host ${siteHost};
+    nginx.ingress.kubernetes.io/proxy-buffer-size: 8k
+  hosts:
+    - host: ${siteHost}
+      paths:
+        - path: /core
+        - path: /core_b2b
+        - path: /core_reports
+        - path: /corerealm
+        - path: /connect
+        - path: /webstart
+        - path: /core_ws
+        - path: /core_docupload
+        - path: /core_ariws
+        - path: /core_restws
+        - path: /core_webdav
+  tls:
+    - hosts:
+        - ${siteHost}
+      secretName: dp-next-ui-cert
+externalConnectService:
+  enabled: true
+  name: external-connect
+  domain: ${docupaceHost}
+`.trim();
+
+    console.log('Writing configuration files...');
+    await ensureDirectoryExists(path.resolve(`${repoPath}/dp/${site}`));
+
+    await fs.writeFile(
+      `${repoPath}/dp/${site}/ui.app.yaml`,
+      uiAppYaml,
+      (err) => {
+        if (err) {
+          console.error('Failed to write the file:', err);
+        } else {
+          console.log(
+            `File ${repoPath}/dp/${site}/ui.app.yaml written successfully.`,
+          );
+        }
+      },
+    );
+
+    await fs.writeFile(
+      `${repoPath}/dp/${site}/ui.values.yaml`,
+      uiValuesYaml,
+      (err) => {
+        if (err) {
+          console.error('Failed to write the file:', err);
+        } else {
+          console.log(
+            `File ${repoPath}/dp/${site}/ui.values.yaml written successfully.`,
+          );
+        }
+      },
+    );
+    console.log('The UI part is done!');
+  } catch (error) {
+    console.error('Error configuring UI:', error);
+  }
+}
+
+async function configureCCUI(
+  siteHost,
+  coreURL,
+  connectURL,
+  docupaceHost,
+  site,
+  env,
+  auth0Domain,
+  auth0ClientId,
+  auth0ClientSecret,
+  auth0Token,
+  vaultSiteSecretsPath,
+  imageTag,
+  revision,
+  repoPath,
+  useS3,
+  ccUrl,
+) {
+  console.log(
+    `Configuring CC UI for site: ${site} Host: ${siteHost} in env: ${env}`,
+  );
+  siteHost = siteHost.replace('https://', '');
+  coreURL = coreURL.replace('https://', '');
+  connectURL = connectURL.replace('https://', '');
+  ccUrl = ccUrl.replace('https://', '');
+
+  try {
+    const auth0Response = await axios.get(
+      `https://${auth0Domain}/api/v2/clients`,
+      {
+        headers: { authorization: `Bearer ${auth0Token}` },
+      },
+    );
+
+    const uiClient = auth0Response.data.find(
+      (client) => client.name === 'docupace-ui-cc',
+    );
+    const uiAuth0ClientId = uiClient.client_id;
+    const uiAuth0ClientSecret = uiClient.client_secret;
+
+    // Generate Auth0 Secret
+    const uiAuth0Secret = crypto
+      .randomBytes(48)
+      .toString('base64')
+      .replace(/[^a-zA-Z0-9]/g, '');
+
+    // Prepare data payload
+    console.log('Preparing Vault CC UI data payload...');
+    const ccUISecretData = JSON.stringify({
+      data: {
+        AUTH0_CLIENT_ID: uiAuth0ClientId,
+        AUTH0_CLIENT_SECRET: uiAuth0ClientSecret,
+        AUTH0_SECRET: uiAuth0Secret,
+      },
+    });
+    console.log('Updating Vault Site Secret =>', vaultSiteSecretsPath);
+    await updateVaultSecrets(vaultSiteSecretsPath, ccUISecretData);
+
+    let siteAWSSecrets = null;
+
+    if (useS3 === true || useS3 === 'true') {
+      const siteAWSSecretsPath = getVaultSecretsConfigs(site).awsSecretsPath;
+      siteAWSSecrets = await getVaultSecrets(siteAWSSecretsPath);
+      console.log(`siteAWSSecretsPath => ${siteAWSSecretsPath}`);
+    }
+
+    const awsS3Vars =
+      useS3 === true || useS3 === 'true'
+        ? `
+    AWS_ACCESS_KEY_ID: vault:secret/data/${site}/aws/config#AWS_ACCESS_KEY_ID
+    AWS_BUCKET_NAME: vault:secret/data/${site}/aws/config#AWS_BUCKET_NAME
+    AWS_SECRET_ACCESS_KEY: vault:secret/data/${site}/aws/config#AWS_SECRET_ACCESS_KEY
+    AWS_REGION: vault:secret/data/${site}/aws/config#AWS_REGION`
+        : '';
+
+    const uiCCAppYaml = `
+repo: docupace-ui-main
+revision: ${revision}
+`.trim();
+
+    const uiCCValuesYaml = `
+uiMain:
+  auth0BaseUrl: https://${ccUrl}
+  auth0IssuerBaseUrl: https://${auth0Domain}
+  auth0ClientId: vault:secret/data/${site}/ui-cc/config#AUTH0_CLIENT_ID
+  graphqlClientUrl: https://${siteHost}/api/graphql
+  graphqlServerUrl: https://${siteHost}/api/graphql
+  connectUrl: https://${connectURL}
+  coreUrl: https://${coreURL}
+  env:
+    AUTH0_AUDIENCE: core-api-access
+    AUTH0_CLIENT_SECRET: vault:secret/data/${site}/ui-cc/config#AUTH0_CLIENT_SECRET
+    AUTH0_SECRET: vault:secret/data/${site}/ui-cc/config#AUTH0_SECRET${awsS3Vars ? '\n    ' + awsS3Vars.trim() : ''}
+image:
+  repository: registry.paperout.com/docupace-ui-main-${env}-docker-local/cc-ui-app
+  tag: ${imageTag}
+imagePullSecrets:
+  - name: jf-artifactory
+ingress:
+  enabled: true
+  className: nginx
+  annotations:
+    external-dns.alpha.kubernetes.io/hostname: ${ccUrl}
+    external-dns.alpha.kubernetes.io/zone: public
+    cert-manager.io/cluster-issuer: letsencrypt
+    nginx.ingress.kubernetes.io/proxy-buffer-size: 128k
+  hosts:
+    - host: ${ccUrl}
+      paths:
+        - path: /
+          pathType: Prefix
+  tls:
+    - hosts:
+        - ${ccUrl}
+      secretName: dp-cc-ui-cert
+${
+  useS3 === true || useS3 === 'true'
+    ? `
+serviceAccount:
+  create: true
+  annotations:
+    "helm.sh/hook": pre-install
+    "helm.sh/hook-weight": "-10"
+    eks.amazonaws.com/role-arn: arn:aws:iam::${siteAWSSecrets.AWS_ACCOUNT_ID}:role/eks-pod-identity-connect-next-${env}-${site}-bucket`
+    : ''
+}
+`.trim();
+
+    console.log('Writing configuration files...');
+    await ensureDirectoryExists(path.resolve(`${repoPath}/dp/${site}`));
+
+    await fs.writeFile(
+      `${repoPath}/dp/${site}/cc.app.yaml`,
+      uiCCAppYaml,
+      (err) => {
+        if (err) {
+          console.error(
+            `Failed to write ${repoPath}/dp/${site}/cc.app.yaml file:`,
+            err,
+          );
+        } else {
+          console.log(
+            `File ${repoPath}/dp/${site}/cc.app.yaml written successfully.`,
+          );
+        }
+      },
+    );
+
+    await fs.writeFile(
+      `${repoPath}/dp/${site}/cc.values.yaml`,
+      uiCCValuesYaml,
+      (err) => {
+        if (err) {
+          console.error(
+            `Failed to write ${repoPath}/dp/${site}/cc.values.yaml file:`,
+            err,
+          );
+        } else {
+          console.log(
+            `File ${repoPath}/dp/${site}/cc.values.yaml written successfully.`,
+          );
+        }
+      },
+    );
+    console.log('CC-UI configuration is done!');
+  } catch (error) {
+    console.error('Error configuring CC-UI:', error);
+  }
+}
+
+export async function cleanAndWritePropertiesFile(configPath, content) {
+  try {
+    const cleanedContent = content
+      .split('\n')
+      .map((line) => line.trim())
+      .filter((line) => line !== '')
+      .join('\n');
+
+    await fs.writeFile(configPath, cleanedContent, 'utf8');
+    console.log(`Cleaned and written file to: ${configPath}`);
+  } catch (error) {
+    console.error(
+      `Error writing properties file to ${configPath}:`,
+      error.message,
+    );
+    process.exit(1);
+  }
+}
+
+export async function updateCoreSiteConfig(site, env, useS3Ui, useS3Gq) {
+  try {
+    const coreSiteEnv = coreSiteEnvMap[env];
+
+    const coreSiteConfigRepoPath = await cloneRepository(
+      `${coreSiteEnv}-site-settings`,
+    );
+
+    const configPath = path.join(
+      `${coreSiteEnv}-site-settings`,
+      site.toUpperCase(),
+      'docucore-nextUI.properties',
+    );
+
+    let siteAWSSecrets = null;
+
+    if (
+      useS3Ui === true ||
+      useS3Ui === 'true' ||
+      useS3Gq === true ||
+      useS3Gq === 'true'
+    ) {
+      const siteAWSSecretsPath = getVaultSecretsConfigs(site).awsSecretsPath;
+      siteAWSSecrets = await getVaultSecrets(siteAWSSecretsPath);
+      console.log(`siteAWSSecretsPath => ${siteAWSSecretsPath}`);
+    }
+
+    const coreSiteConfig = `
+        ${
+          siteAWSSecrets
+            ? `
+com.docupace.imports.files.FilesImportConfig.aws.accessKeyId=${siteAWSSecrets.AWS_ACCESS_KEY_ID}
+com.docupace.imports.files.FilesImportConfig.aws.accessKeySecret=${siteAWSSecrets.AWS_SECRET_ACCESS_KEY}
+com.docupace.imports.files.FilesImportConfig.aws.region=${siteAWSSecrets.AWS_REGION}`.trim()
+            : ''
+        }
+`;
+
+    await fs.ensureDir(path.join(coreSiteConfigRepoPath, site.toUpperCase()));
+    await cleanAndWritePropertiesFile(configPath, coreSiteConfig);
+    await pushDeployConfig(
+      coreSiteConfigRepoPath,
+      `Core config: docucore-nextUI.properties for site: (${site.toUpperCase()}) update in env: (${env})`,
+    );
+  } catch (error) {
+    console.error('Error:', error.message);
+    process.exit(1);
+  }
+}
+
+async function configureGraphQLServer(
+  siteHost,
+  coreURL,
+  docupaceHost,
+  site,
+  env,
+  auth0Domain,
+  auth0ClientId,
+  auth0ClientSecret,
+  auth0Token,
+  vaultSiteSecretsPath,
+  imageTag,
+  revision,
+  standardConfigRemoteBranch,
+  repoPath,
+  commonSecrets,
+  useS3,
+) {
+  siteHost = siteHost.replace('https://', '');
+  coreURL = coreURL.replace('https://', '');
+  console.log(
+    `Configuring GraphQL Server for site: ${site} Host: ${siteHost} in env: ${env}`,
+  );
+
+  try {
+    const auth0Response = await axios.get(
+      `https://${auth0Domain}/api/v2/clients`,
+      {
+        headers: { authorization: `Bearer ${auth0Token}` },
+      },
+    );
+
+    const graphQLServerClient = auth0Response.data.find(
+      (client) => client.name === 'docupace-graphql',
+    );
+    const graphQLServerClientCredentials = auth0Response.data.find(
+      (client) => client.name === 'docupace-graphql-client-credentials',
+    );
+
+    const graphQLServerAuth0ClientId = graphQLServerClient.client_id;
+    const graphQLServerAuth0ClientSecret = graphQLServerClient.client_secret;
+
+    const graphQLServerCCAuth0ClientId =
+      graphQLServerClientCredentials.client_id;
+    const graphQLServerCCAuth0ClientSecret =
+      graphQLServerClientCredentials.client_secret;
+
+    // Prepare data payload
+    console.log('Preparing Vault GraphQL Server data payload...');
+    const graphQLServerSecretData = JSON.stringify({
+      data: {
+        AUTH0_CLIENT_ID: graphQLServerAuth0ClientId,
+        AUTH0_CLIENT_SECRET: graphQLServerAuth0ClientSecret,
+        AUTH0_CC_CLIENT_ID: graphQLServerCCAuth0ClientId,
+        AUTH0_CC_CLIENT_SECRET: graphQLServerCCAuth0ClientSecret,
+        CORE_PASSWORD: commonSecrets.CORE_PASSWORD,
+        REMOTE_CONFIG_PATH: commonSecrets.REMOTE_CONFIG_PATH,
+        STANDARD_CONFIG_REMOTE_PATH: commonSecrets.STANDARD_CONFIG_REMOTE_PATH,
+      },
+    });
+
+    await updateVaultSecrets(vaultSiteSecretsPath, graphQLServerSecretData);
+
+    let siteAWSSecrets = null;
+
+    if (useS3 === true || useS3 === 'true') {
+      const siteAWSSecretsPath = getVaultSecretsConfigs(site).awsSecretsPath;
+      siteAWSSecrets = await getVaultSecrets(siteAWSSecretsPath);
+      console.log(`siteAWSSecretsPath => ${siteAWSSecretsPath}`);
+    }
+
+    const awsS3Vars =
+      useS3 === true || useS3 === 'true'
+        ? `
+    AWS_ACCESS_KEY_ID: vault:secret/data/${site}/aws/config#AWS_ACCESS_KEY_ID
+    AWS_S3_BUCKET_NAME: vault:secret/data/${site}/aws/config#AWS_BUCKET_NAME
+    AWS_SECRET_ACCESS_KEY: vault:secret/data/${site}/aws/config#AWS_SECRET_ACCESS_KEY
+    AWS_REGION: vault:secret/data/${site}/aws/config#AWS_REGION`.trim()
+        : '';
+    // Prepare graphql-server.app.yaml
+    const graphQLServerAppYaml = `
+repo: docupace-graphql-server
+revision: ${revision}
+`.trim();
+
+    // Prepare graphql-server.values.yaml
+    const graphQLServerValuesYaml = `
+graphqlServer:
+  auth0Domain: https://${auth0Domain}
+  auth0ClientId: vault:secret/data/${site}/graphql-server/config#AUTH0_CLIENT_ID
+  auth0Audience: ${commonSecrets.CORE_API_IDENTIFIER}
+  baseUrl: https://${siteHost}/api/graphql
+  coreUrl: https://${coreURL}
+  integrationHubUrl: "https://${commonSecrets.INTEGRATION_HUB_URL}"
+  standardConfigRemoteBranch: ${standardConfigRemoteBranch}
+  apiLevel: "2"
+  env:
+    AUTH0_CLIENT_SECRET: vault:secret/data/${site}/graphql-server/config#AUTH0_CLIENT_SECRET
+    STANDARD_CONFIG_REMOTE_PATH: vault:secret/data/common/config#STANDARD_CONFIG_REMOTE_PATH
+    SITE_CONFIG_REMOTE_PATH: vault:secret/data/${site}/common/config#SITE_CONFIG_REMOTE_PATH
+    AUTH0_CC_CLIENT_ID: vault:secret/data/${site}/graphql-server/config#AUTH0_CC_CLIENT_ID
+    AUTH0_CC_CLIENT_SECRET: vault:secret/data/${site}/graphql-server/config#AUTH0_CC_CLIENT_SECRET${awsS3Vars ? '\n    ' + awsS3Vars.trim() : ''}
+${
+  useS3 === true || useS3 === 'true'
+    ? `
+serviceAccount:
+  create: true
+  annotations:
+    "helm.sh/hook": pre-install
+    "helm.sh/hook-weight": "-10"
+    eks.amazonaws.com/role-arn: arn:aws:iam::${siteAWSSecrets.AWS_ACCOUNT_ID}:role/eks-pod-identity-connect-next-${env}-${site}-bucket`.trim()
+    : ''
+}
+image:
+  repository: registry.paperout.com/docupace-graphql-server-${env}-docker-local/docupace-graphql-server
+  tag: ${imageTag}
+imagePullSecrets:
+  - name: jf-artifactory
+ingress:
+  annotations:
+    external-dns.alpha.kubernetes.io/hostname: ${siteHost}
+    external-dns.alpha.kubernetes.io/zone: public
+    cert-manager.io/cluster-issuer: letsencrypt
+    nginx.ingress.kubernetes.io/proxy-buffer-size: 128k
+  enabled: true
+  className: nginx
+  hosts:
+    - host: ${siteHost}
+      paths:
+        - path: /api/graphql
+          pathType: Prefix
+  tls:
+    - hosts:
+        - ${siteHost}
+      secretName: dp-next-ui-cert`.trim();
+
+    // Write configuration files
+    console.log('Writing ArgoCD GraphQL Server configuration files...');
+    await ensureDirectoryExists(path.resolve(`${repoPath}/dp/${site}`));
+
+    await fs.writeFile(
+      `${repoPath}/dp/${site}/graphql-server.app.yaml`,
+      graphQLServerAppYaml,
+      (err) => {
+        if (err) {
+          console.error('Failed to write the file:', err);
+        } else {
+          console.log('File written successfully.');
+        }
+      },
+    );
+
+    await fs.writeFile(
+      `${repoPath}/dp/${site}/graphql-server.values.yaml`,
+      graphQLServerValuesYaml,
+      (err) => {
+        if (err) {
+          console.error(
+            `Failed to write ${repoPath}/dp/${site}/graphql-server.values.yaml file:`,
+            err,
+          );
+        } else {
+          console.log(
+            `File ${repoPath}/dp/${site}/graphql-server.values.yaml written successfully.`,
+          );
+        }
+      },
+    );
+    console.log('GraphQL Server configuration is done!');
+  } catch (error) {
+    console.error('Error configuring GraphQL Server:', error);
+  }
+}
+
+export async function configureFromSite(
+  fromSite,
+  toSite,
+  fromEnv,
+  toEnv,
+  deployUI,
+  deployGraphQLServer,
+  useNewDomain,
+  useS3Ui,
+  deployCCUI,
+  useS3Gq,
+  auth0Tenant,
+) {
+  console.log(
+    `Configuring Auth0 tenants and ArgoCD apps for site: ${toSite} in env: ${toEnv} from site: ${fromSite}`,
+  );
+  // Common Secrets
+  const commonSecretsPath = getVaultSecretsConfigs(toSite).commonSecretsPath;
+  console.log(`commonSecretsPath => ${commonSecretsPath}`);
+  const commonSecrets = await getVaultSecrets(commonSecretsPath);
+
+  // Site Common Secrets
+  const siteCommonSecretsPath =
+    getVaultSecretsConfigs(toSite).siteCommonSecretsPath;
+  console.log(`siteCommonSecretsPath => ${siteCommonSecretsPath}`);
+  const siteCommonSecrets = await getVaultSecrets(siteCommonSecretsPath);
+  let auth0Domain;
+  if (auth0Tenant === '') {
+    auth0Domain = `docupace-${toEnv}-${toSite}.us.auth0.com`;
+  } else {
+    auth0Domain = `${auth0Tenant}.us.auth0.com`;
+  }
+
+  const auth0ClientId = siteCommonSecrets.AUTH0_CLIENT_ID;
+  const auth0ClientSecret = siteCommonSecrets.AUTH0_CLIENT_SECRET;
+  const auth0Token = await getAuth0AuthToken(
+    auth0Domain,
+    auth0ClientId,
+    auth0ClientSecret,
+  );
+
+  // UI MAIN app
+  const uiSecretsPath = getVaultSecretsConfigs(toSite).uiSecretsPath;
+  console.log(`uiSecretsPath => ${uiSecretsPath}`);
+
+  // UI CC app
+  const ccUISecretsPath = getVaultSecretsConfigs(toSite).ccUISecretsPath;
+  console.log(`ccUISecretsPath => ${ccUISecretsPath}`);
+
+  // GraphQL-Server app
+  const graphqlSecretsPath =
+    getVaultSecretsConfigs(toSite).graphqlServerSecretsPath;
+  console.log(`graphqlSecretsPath => ${graphqlSecretsPath}`);
+
+  let repoPathFromEnv = '';
+  let repoPathToEnv = '';
+  // Clone repositories
+  if (fromEnv === toEnv) {
+    repoPathFromEnv = await cloneEnvRepository(fromEnv);
+    repoPathToEnv = repoPathFromEnv;
+  } else {
+    repoPathFromEnv = await cloneEnvRepository(fromEnv);
+    repoPathToEnv = await cloneEnvRepository(toEnv);
+  }
+
+  //TODO: clone fromEnv and toEnv. replace above with this
+
+  // const auth0RepoPath = await cloneRepository('auth0-site-setup');
+  let uiImageTag, uiRevision;
+  if (deployUI === true || deployUI === 'true') {
+    // Read deploy configs
+    const { deployConfig: deployUIConfig } = await readDeployConfig(
+      'ui',
+      fromEnv,
+      fromSite,
+      'values',
+    );
+    const { deployConfig: deployUiRevisionConfig } = await readDeployConfig(
+      'ui',
+      fromEnv,
+      fromSite,
+      'app',
+    );
+
+    uiImageTag = deployUIConfig.image.tag;
+    uiRevision = deployUiRevisionConfig.revision;
+
+    console.log(`Copying Latest UI Revision: ${uiRevision}`);
+  }
+
+  let ccImageTag, ccRevision;
+  if (deployCCUI === true || deployCCUI === 'true') {
+    const { deployConfig: deployCCConfig } = await readDeployConfig(
+      'cc',
+      fromEnv,
+      fromSite,
+      'values',
+    );
+
+    const { deployConfig: deployCCRevisionConfig } = await readDeployConfig(
+      'cc',
+      fromEnv,
+      fromSite,
+      'app',
+    );
+
+    ccImageTag = deployCCConfig.image.tag;
+    ccRevision = deployCCRevisionConfig.revision;
+
+    console.log(`Copying Latest CC Revision: ${ccRevision}`);
+  }
+
+  const { deployConfig: deployGraphQLServerConfig } = await readDeployConfig(
+    'graphql-server',
+    fromEnv,
+    fromSite,
+    'values',
+  );
+
+  const { deployConfig: deployGraphQLServerRevisionConfig } =
+    await readDeployConfig('graphql-server', fromEnv, fromSite, 'app');
+
+  const gqRevision = deployGraphQLServerRevisionConfig.revision;
+
+  console.log(`Copying Latest GQ Server Revision: ${gqRevision}`);
+
+  const graphqlImageTag = deployGraphQLServerConfig.image.tag;
+  const graphqlStandardConfigRemoteBranch =
+    deployGraphQLServerConfig.graphqlServer.standardConfigRemoteBranch;
+
+  if (deployUI === true || deployUI === 'true') {
+    console.log(
+      `Copying Latest UI Image Tag: ${uiImageTag} from site: ${fromSite} to site: ${toSite}`,
+    );
+  }
+
+  if (deployCCUI === true || deployCCUI === 'true') {
+    console.log(
+      `Copying Latest CC-UI Image Tag: ${ccImageTag} from site: ${fromSite} to site: ${toSite}`,
+    );
+  }
+
+  console.log(
+    `Copying Latest GraphQL Server Image Tag: ${deployGraphQLServerConfig.image.tag} from site: ${fromSite} to site: ${toSite}`,
+  );
+
+  const envConfig = environmentConfig[toEnv];
+
+  let CORE_URL, SITE_HOST, CORE_API_CONTEXT, CONNECT_URL, DOCUPACE_HOST;
+  const newUrl = envConfig.newUrl(toSite);
+  const ccUrl = envConfig.ccUrl(toSite);
+
+  SITE_HOST = `${newUrl}`;
+
+  if (useNewDomain === true || useNewDomain === 'true') {
+    const newUrl = envConfig.newUrl(toSite);
+    CORE_URL = `${newUrl}/core`;
+    // SITE_HOST = newUrl;
+    CORE_API_CONTEXT = 'core';
+    CONNECT_URL = `${newUrl}/connect`;
+    DOCUPACE_HOST = envConfig.docupaceHost();
+  } else {
+    const oldUrl = envConfig.oldUrl(toSite);
+    CORE_URL = oldUrl;
+    // SITE_HOST = oldUrl;
+    CORE_API_CONTEXT = toSite;
+    CONNECT_URL = `${oldUrl}_ui`;
+  }
+
+  if (deployUI === true || deployUI === 'true') {
+    await configureUI(
+      SITE_HOST,
+      CORE_URL,
+      CONNECT_URL,
+      DOCUPACE_HOST,
+      toSite,
+      toEnv,
+      auth0Domain,
+      auth0ClientId,
+      auth0ClientSecret,
+      auth0Token,
+      uiSecretsPath,
+      uiImageTag,
+      uiRevision,
+      repoPathToEnv,
+      useS3Ui,
+    );
+  }
+
+  if (deployCCUI === true || deployCCUI === 'true') {
+    await configureCCUI(
+      SITE_HOST,
+      CORE_URL,
+      CONNECT_URL,
+      DOCUPACE_HOST,
+      toSite,
+      toEnv,
+      auth0Domain,
+      auth0ClientId,
+      auth0ClientSecret,
+      auth0Token,
+      ccUISecretsPath,
+      ccImageTag,
+      ccRevision,
+      repoPathToEnv,
+      useS3Ui,
+      ccUrl,
+    );
+  }
+
+  await configureGraphQLServer(
+    SITE_HOST,
+    CORE_URL,
+    DOCUPACE_HOST,
+    toSite,
+    toEnv,
+    auth0Domain,
+    auth0ClientId,
+    auth0ClientSecret,
+    auth0Token,
+    graphqlSecretsPath,
+    graphqlImageTag,
+    gqRevision,
+    graphqlStandardConfigRemoteBranch,
+    repoPathToEnv,
+    commonSecrets,
+    useS3Gq,
+  );
+
+  console.log('Updating Core Site Config...');
+  await updateCoreSiteConfig(toSite, toEnv, useS3Ui, useS3Gq);
+  await pushDeployConfig(
+    repoPathToEnv,
+    `Config update for ${toSite} from ${fromSite} GraphQL: ${graphqlImageTag}`,
+  );
+}