@envsync-cloud/deploy-cli 0.6.15 → 0.6.18

package/dist/index.js

@@ -671,8 +671,11 @@ function renderTraefikDynamicConfig(config) {
     "          - OPTIONS",
     "        accessControlAllowHeaders:",
     "          - Content-Type",
+    "          - content-type",
     "          - Authorization",
+    "          - authorization",
     "        accessControlAllowCredentials: false",
+    "        accessControlMaxAge: 600",
     "        addVaryHeader: true",
     "  services:",
     "    envsync-api:",
@@ -715,36 +718,42 @@ function renderTraefikDynamicConfig(config) {
     `      rule: Host(\`${hosts.landing}\`)`,
     "      service: landing",
     "      entryPoints: [websecure]",
-    "      tls: {}",
+    "      tls:",
+    "        certResolver: letsencrypt",
     "    web-router:",
     `      rule: Host(\`${hosts.app}\`)`,
     "      service: web",
     "      entryPoints: [websecure]",
-    "      tls: {}",
+    "      tls:",
+    "        certResolver: letsencrypt",
     "    obs-otlp-router:",
     `      rule: Host(\`${hosts.obs}\`) && (PathPrefix(\`/v1/traces\`) || PathPrefix(\`/v1/logs\`) || PathPrefix(\`/v1/metrics\`))`,
     "      service: clickstack-otlp",
     "      middlewares: [otel-cors]",
     "      priority: 100",
     "      entryPoints: [websecure]",
-    "      tls: {}",
+    "      tls:",
+    "        certResolver: letsencrypt",
     "    obs-api-router:",
     `      rule: Host(\`${hosts.obs}\`) && PathPrefix(\`/api\`)`,
     "      service: clickstack-api",
     "      priority: 90",
     "      entryPoints: [websecure]",
-    "      tls: {}",
+    "      tls:",
+    "        certResolver: letsencrypt",
     "    obs-ui-router:",
     `      rule: Host(\`${hosts.obs}\`)`,
     "      service: clickstack-ui",
     "      priority: 10",
     "      entryPoints: [websecure]",
-    "      tls: {}",
+    "      tls:",
+    "        certResolver: letsencrypt",
     "    api-router:",
     `      rule: Host(\`${hosts.api}\`)`,
     "      service: envsync-api",
     "      entryPoints: [websecure]",
-    "      tls: {}"
+    "      tls:",
+    "        certResolver: letsencrypt"
   ].join("\n") + "\n";
 }
 function renderNginxConf(kind) {
@@ -941,8 +950,9 @@ ${renderEnvList({
     KC_PROXY_HEADERS: "xforwarded",
     KC_HOSTNAME_STRICT: "false"
   })}
-    volumes:
-      - ${KEYCLOAK_REALM_FILE}:/opt/keycloak/data/import/realm.json:ro
+    configs:
+      - source: keycloak_realm
+        target: /opt/keycloak/data/import/realm.json
     networks: [envsync]
     deploy:
       labels:
@@ -1005,16 +1015,16 @@ ${renderEnvList({
     environment:
 ${renderEnvList({
     HYPERDX_APP_URL: `https://${hosts.obs}`,
-    HYPERDX_APP_PORT: "443",
     HYPERDX_API_URL: `https://${hosts.obs}`,
-    HYPERDX_API_PORT: "443",
     FRONTEND_URL: `https://${hosts.obs}`
   })}
     volumes:
       - clickstack_data:/data/db
       - clickstack_ch_data:/var/lib/clickhouse
       - clickstack_ch_logs:/var/log/clickhouse-server
-      - ${CLICKSTACK_CLICKHOUSE_CONF}:/etc/clickhouse-server/config.d/envsync-listen-host.xml:ro
+    configs:
+      - source: clickstack_clickhouse_conf
+        target: /etc/clickhouse-server/config.d/envsync-listen-host.xml
     networks: [envsync]
     healthcheck:
       disable: true
@@ -1022,22 +1032,27 @@ ${renderEnvList({
   otel-agent:
     image: ${config.images.otel_agent}
     command: ["--config=/etc/otel-agent.yaml"]
-    volumes:
-      - ${OTEL_AGENT_CONF}:/etc/otel-agent.yaml:ro
+    configs:
+      - source: otel_agent_conf
+        target: /etc/otel-agent.yaml
     networks: [envsync]
 ${includeAppServices ? `
 
   landing_nginx:
     image: nginx:1.27-alpine
+    configs:
+      - source: nginx_landing_conf
+        target: /etc/nginx/conf.d/default.conf
     volumes:
-      - ${NGINX_LANDING_CONF}:/etc/nginx/conf.d/default.conf:ro
       - ${RELEASES_ROOT}/landing/current:/srv/landing:ro
     networks: [envsync]
 
   web_nginx:
     image: nginx:1.27-alpine
+    configs:
+      - source: nginx_web_conf
+        target: /etc/nginx/conf.d/default.conf
     volumes:
-      - ${NGINX_WEB_CONF}:/etc/nginx/conf.d/default.conf:ro
       - ${RELEASES_ROOT}/web/current:/srv/web:ro
     networks: [envsync]
 
@@ -1068,6 +1083,18 @@ volumes:
   clickstack_data:
   clickstack_ch_data:
   clickstack_ch_logs:
+
+configs:
+  keycloak_realm:
+    file: ${KEYCLOAK_REALM_FILE}
+  clickstack_clickhouse_conf:
+    file: ${CLICKSTACK_CLICKHOUSE_CONF}
+  otel_agent_conf:
+    file: ${OTEL_AGENT_CONF}
+  nginx_landing_conf:
+    file: ${NGINX_LANDING_CONF}
+  nginx_web_conf:
+    file: ${NGINX_WEB_CONF}
 `.trimStart();
 }
 function writeDeployArtifacts(config, generated) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@envsync-cloud/deploy-cli",
-  "version": "0.6.15",
+  "version": "0.6.18",
   "description": "CLI for self-hosted EnvSync deployment on Docker Swarm",
   "type": "module",
   "bin": {