@fntio/infra-client 0.0.0-stage → 0.5.0

package/dist/lib/managed-login-branding.json

@@ -0,0 +1,450 @@
+{
+    "components": {
+        "secondaryButton": {
+            "lightMode": {
+                "hover": {
+                    "backgroundColor": "eef2ffff",
+                    "borderColor": "4338caff",
+                    "textColor": "4338caff"
+                },
+                "defaults": {
+                    "backgroundColor": "ffffffff",
+                    "borderColor": "4f46e5ff",
+                    "textColor": "4f46e5ff"
+                },
+                "active": {
+                    "backgroundColor": "e0e7ffff",
+                    "borderColor": "4338caff",
+                    "textColor": "4338caff"
+                }
+            },
+            "darkMode": {
+                "hover": {
+                    "backgroundColor": "192534ff",
+                    "borderColor": "a5a0f8ff",
+                    "textColor": "a5a0f8ff"
+                },
+                "defaults": {
+                    "backgroundColor": "0f1b2aff",
+                    "borderColor": "8b83f5ff",
+                    "textColor": "8b83f5ff"
+                },
+                "active": {
+                    "backgroundColor": "354150ff",
+                    "borderColor": "a5a0f8ff",
+                    "textColor": "a5a0f8ff"
+                }
+            }
+        },
+        "form": {
+            "lightMode": {
+                "backgroundColor": "ffffffff",
+                "borderColor": "c6c6cdff"
+            },
+            "borderRadius": 8.0,
+            "backgroundImage": {
+                "enabled": false
+            },
+            "logo": {
+                "location": "CENTER",
+                "position": "TOP",
+                "enabled": false,
+                "formInclusion": "IN"
+            },
+            "darkMode": {
+                "backgroundColor": "0f1b2aff",
+                "borderColor": "424650ff"
+            }
+        },
+        "alert": {
+            "lightMode": {
+                "error": {
+                    "backgroundColor": "fff7f7ff",
+                    "borderColor": "d91515ff"
+                }
+            },
+            "borderRadius": 12.0,
+            "darkMode": {
+                "error": {
+                    "backgroundColor": "1a0000ff",
+                    "borderColor": "eb6f6fff"
+                }
+            }
+        },
+        "favicon": {
+            "enabledTypes": [
+                "ICO",
+                "SVG"
+            ]
+        },
+        "pageBackground": {
+            "image": {
+                "enabled": true
+            },
+            "lightMode": {
+                "color": "ffffffff"
+            },
+            "darkMode": {
+                "color": "0f1b2aff"
+            }
+        },
+        "pageText": {
+            "lightMode": {
+                "bodyColor": "414d5cff",
+                "headingColor": "000716ff",
+                "descriptionColor": "414d5cff"
+            },
+            "darkMode": {
+                "bodyColor": "b6bec9ff",
+                "headingColor": "d1d5dbff",
+                "descriptionColor": "b6bec9ff"
+            }
+        },
+        "phoneNumberSelector": {
+            "displayType": "TEXT"
+        },
+        "primaryButton": {
+            "lightMode": {
+                "hover": {
+                    "backgroundColor": "4338caff",
+                    "textColor": "ffffffff"
+                },
+                "defaults": {
+                    "backgroundColor": "4f46e5ff",
+                    "textColor": "ffffffff"
+                },
+                "active": {
+                    "backgroundColor": "4338caff",
+                    "textColor": "ffffffff"
+                },
+                "disabled": {
+                    "backgroundColor": "ffffffff",
+                    "borderColor": "ffffffff"
+                }
+            },
+            "darkMode": {
+                "hover": {
+                    "backgroundColor": "a5a0f8ff",
+                    "textColor": "000716ff"
+                },
+                "defaults": {
+                    "backgroundColor": "8b83f5ff",
+                    "textColor": "000716ff"
+                },
+                "active": {
+                    "backgroundColor": "8b83f5ff",
+                    "textColor": "000716ff"
+                },
+                "disabled": {
+                    "backgroundColor": "ffffffff",
+                    "borderColor": "ffffffff"
+                }
+            }
+        },
+        "pageFooter": {
+            "lightMode": {
+                "borderColor": "d5dbdbff",
+                "background": {
+                    "color": "fafafaff"
+                }
+            },
+            "backgroundImage": {
+                "enabled": false
+            },
+            "logo": {
+                "location": "START",
+                "enabled": false
+            },
+            "darkMode": {
+                "borderColor": "424650ff",
+                "background": {
+                    "color": "0f141aff"
+                }
+            }
+        },
+        "pageHeader": {
+            "lightMode": {
+                "borderColor": "d5dbdbff",
+                "background": {
+                    "color": "fafafaff"
+                }
+            },
+            "backgroundImage": {
+                "enabled": false
+            },
+            "logo": {
+                "location": "START",
+                "enabled": false
+            },
+            "darkMode": {
+                "borderColor": "424650ff",
+                "background": {
+                    "color": "0f141aff"
+                }
+            }
+        },
+        "idpButton": {
+            "standard": {
+                "lightMode": {
+                    "hover": {
+                        "backgroundColor": "eef2ffff",
+                        "borderColor": "4338caff",
+                        "textColor": "4338caff"
+                    },
+                    "defaults": {
+                        "backgroundColor": "ffffffff",
+                        "borderColor": "424650ff",
+                        "textColor": "424650ff"
+                    },
+                    "active": {
+                        "backgroundColor": "e0e7ffff",
+                        "borderColor": "4338caff",
+                        "textColor": "4338caff"
+                    }
+                },
+                "darkMode": {
+                    "hover": {
+                        "backgroundColor": "192534ff",
+                        "borderColor": "a5a0f8ff",
+                        "textColor": "a5a0f8ff"
+                    },
+                    "defaults": {
+                        "backgroundColor": "0f1b2aff",
+                        "borderColor": "c6c6cdff",
+                        "textColor": "c6c6cdff"
+                    },
+                    "active": {
+                        "backgroundColor": "354150ff",
+                        "borderColor": "a5a0f8ff",
+                        "textColor": "a5a0f8ff"
+                    }
+                }
+            },
+            "custom": {}
+        }
+    },
+    "componentClasses": {
+        "dropDown": {
+            "lightMode": {
+                "hover": {
+                    "itemBackgroundColor": "f4f4f4ff",
+                    "itemBorderColor": "7d8998ff",
+                    "itemTextColor": "000716ff"
+                },
+                "defaults": {
+                    "itemBackgroundColor": "ffffffff"
+                },
+                "match": {
+                    "itemBackgroundColor": "414d5cff",
+                    "itemTextColor": "4f46e5ff"
+                }
+            },
+            "borderRadius": 8.0,
+            "darkMode": {
+                "hover": {
+                    "itemBackgroundColor": "081120ff",
+                    "itemBorderColor": "5f6b7aff",
+                    "itemTextColor": "e9ebedff"
+                },
+                "defaults": {
+                    "itemBackgroundColor": "192534ff"
+                },
+                "match": {
+                    "itemBackgroundColor": "d1d5dbff",
+                    "itemTextColor": "a5a0f8ff"
+                }
+            }
+        },
+        "input": {
+            "lightMode": {
+                "defaults": {
+                    "backgroundColor": "ffffffff",
+                    "borderColor": "7d8998ff"
+                },
+                "placeholderColor": "5f6b7aff"
+            },
+            "borderRadius": 8.0,
+            "darkMode": {
+                "defaults": {
+                    "backgroundColor": "0f1b2aff",
+                    "borderColor": "5f6b7aff"
+                },
+                "placeholderColor": "8d99a8ff"
+            }
+        },
+        "inputDescription": {
+            "lightMode": {
+                "textColor": "5f6b7aff"
+            },
+            "darkMode": {
+                "textColor": "8d99a8ff"
+            }
+        },
+        "buttons": {
+            "borderRadius": 8.0
+        },
+        "optionControls": {
+            "lightMode": {
+                "defaults": {
+                    "backgroundColor": "ffffffff",
+                    "borderColor": "7d8998ff"
+                },
+                "selected": {
+                    "backgroundColor": "4f46e5ff",
+                    "foregroundColor": "ffffffff"
+                }
+            },
+            "darkMode": {
+                "defaults": {
+                    "backgroundColor": "0f1b2aff",
+                    "borderColor": "7d8998ff"
+                },
+                "selected": {
+                    "backgroundColor": "8b83f5ff",
+                    "foregroundColor": "000716ff"
+                }
+            }
+        },
+        "statusIndicator": {
+            "lightMode": {
+                "success": {
+                    "backgroundColor": "f2fcf3ff",
+                    "borderColor": "037f0cff",
+                    "indicatorColor": "037f0cff"
+                },
+                "pending": {
+                    "indicatorColor": "AAAAAAAA"
+                },
+                "warning": {
+                    "backgroundColor": "fffce9ff",
+                    "borderColor": "8d6605ff",
+                    "indicatorColor": "8d6605ff"
+                },
+                "error": {
+                    "backgroundColor": "fff7f7ff",
+                    "borderColor": "d91515ff",
+                    "indicatorColor": "d91515ff"
+                }
+            },
+            "darkMode": {
+                "success": {
+                    "backgroundColor": "001a02ff",
+                    "borderColor": "29ad32ff",
+                    "indicatorColor": "29ad32ff"
+                },
+                "pending": {
+                    "indicatorColor": "AAAAAAAA"
+                },
+                "warning": {
+                    "backgroundColor": "1d1906ff",
+                    "borderColor": "e0ca57ff",
+                    "indicatorColor": "e0ca57ff"
+                },
+                "error": {
+                    "backgroundColor": "1a0000ff",
+                    "borderColor": "eb6f6fff",
+                    "indicatorColor": "eb6f6fff"
+                }
+            }
+        },
+        "divider": {
+            "lightMode": {
+                "borderColor": "ebebf0ff"
+            },
+            "darkMode": {
+                "borderColor": "232b37ff"
+            }
+        },
+        "idpButtons": {
+            "icons": {
+                "enabled": true
+            }
+        },
+        "focusState": {
+            "lightMode": {
+                "borderColor": "4f46e5ff"
+            },
+            "darkMode": {
+                "borderColor": "8b83f5ff"
+            }
+        },
+        "inputLabel": {
+            "lightMode": {
+                "textColor": "000716ff"
+            },
+            "darkMode": {
+                "textColor": "d1d5dbff"
+            }
+        },
+        "link": {
+            "lightMode": {
+                "hover": {
+                    "textColor": "4338caff"
+                },
+                "defaults": {
+                    "textColor": "4f46e5ff"
+                }
+            },
+            "darkMode": {
+                "hover": {
+                    "textColor": "a5a0f8ff"
+                },
+                "defaults": {
+                    "textColor": "8b83f5ff"
+                }
+            }
+        }
+    },
+    "categories": {
+        "form": {
+            "sessionTimerDisplay": "NONE",
+            "instructions": {
+                "enabled": false
+            },
+            "languageSelector": {
+                "enabled": false
+            },
+            "displayGraphics": true,
+            "location": {
+                "horizontal": "CENTER",
+                "vertical": "CENTER"
+            }
+        },
+        "auth": {
+            "federation": {
+                "interfaceStyle": "BUTTON_LIST",
+                "order": []
+            },
+            "authMethodOrder": [
+                [
+                    {
+                        "display": "BUTTON",
+                        "type": "FEDERATED"
+                    },
+                    {
+                        "display": "INPUT",
+                        "type": "USERNAME_PASSWORD"
+                    }
+                ]
+            ]
+        },
+        "global": {
+            "colorSchemeMode": "LIGHT",
+            "pageFooter": {
+                "enabled": false
+            },
+            "pageHeader": {
+                "enabled": false
+            },
+            "spacingDensity": "REGULAR"
+        },
+        "signUp": {
+            "acceptanceElements": [
+                {
+                    "enforcement": "NONE",
+                    "textKey": "en"
+                }
+            ]
+        }
+    }
+}

package/dist/lib/network-stack.d.ts

@@ -0,0 +1,58 @@
+import * as cdk from "aws-cdk-lib";
+import { Construct } from "constructs";
+import * as s3 from "aws-cdk-lib/aws-s3";
+import * as dynamodb from "aws-cdk-lib/aws-dynamodb";
+import * as sns from "aws-cdk-lib/aws-sns";
+import { AppFunction } from "./constructs/app-function";
+import { ResolvedSite } from "./network-validation";
+import { AuditLogTarget } from "./audit-log";
+export interface NetworkStackProps extends cdk.StackProps {
+    /** The hub's SET-ONCE product prefix (hub.resourcePrefix) — every by-name
+     *  contract derives from it; never change it after the first deploy. */
+    readonly resourcePrefix: string;
+    readonly hostedZoneId: string;
+    readonly zoneName: string;
+    /** Sites live at `<site>.<subdomain>.<zoneName>` — the wildcard cert and
+     *  DNS record cover them all, so adding a site changes neither. */
+    readonly subdomain: string;
+    /** From resolveSites, sorted by id. Site ids are permanent — baked into
+     *  every enrolled device's and connector's hostname. */
+    readonly sites: ResolvedSite[];
+    /** prod=true keeps the device databases (EFS) on stack teardown and turns
+     *  on load-balancer deletion protection (disable before a teardown). */
+    readonly prod: boolean;
+    /** Container Insights on the control-plane cluster (Security Hub ECS.12);
+     *  per-metric cost. Default: `prod`. */
+    readonly containerInsights?: boolean;
+    /** Run the control servers from a copy of the Headscale image in this account's own registry. */
+    readonly mirrorImages?: boolean;
+    /** The reconciler renders catalog + grants into per-site ACLs: active
+     *  grant on R ⇔ may reach R's cidr:ports via R's account's connector. */
+    /** The hub's shared S3 server-access-log bucket (DataStack.accessLogsBucket); the ALB
+     *  access-log bucket logs into it under s3/alb-logs/ (Security Hub S3.9). */
+    readonly accessLogsBucket?: s3.IBucket;
+    readonly resourcesTable: dynamodb.ITable;
+    readonly accessTable: dynamodb.ITable;
+    readonly groupsTable: dynamodb.ITable;
+    /** Ops alert topic for the reconciler alarm. Optional so the stack can
+     *  synth standalone. */
+    readonly alertTopic?: sns.ITopic;
+    /** The activity log the reconciler records VPN sessions, firewall-rule changes and connector events
+     *  to. Optional so the stack can synth standalone; absent = no rows. */
+    readonly auditLog?: AuditLogTarget;
+}
+/** Self-hosted Headscale, ONE PER SITE, sharing one cluster/EFS/ALB. Control
+ *  planes never carry user traffic; admin ops via ECS Exec — no admin port. */
+export declare class NetworkStack extends cdk.Stack {
+    readonly sites: ResolvedSite[];
+    /** Mints DEVICE keys for any site (siteId argument — its only caller, the
+     *  vending API role, binds userName to the verified JWT). */
+    readonly deviceKeyMinter: AppFunction;
+    /** Per-site CONNECTOR minters; each ignores input and is pinned to its
+     *  site's control plane by env. Safe to grant cross-account. */
+    readonly connectorKeyMinters: Record<string, AppFunction>;
+    constructor(scope: Construct, id: string, props: NetworkStackProps);
+    /** Grant invoke on ONE SITE's connector minter (machine keys only — never
+     *  the device minter). Prefer a task-role ARN over a whole-account id. */
+    grantConnectorAccount(siteId: string, connectorPrincipal: string): void;
+}