@jaypie/constructs 1.1.58 → 1.1.59

package/dist/esm/JaypieNextJs.d.ts

@@ -1,10 +1,16 @@
 import { IHostedZone } from "aws-cdk-lib/aws-route53";
+import * as secretsmanager from "aws-cdk-lib/aws-secretsmanager";
 import { Construct } from "constructs";
+import { JaypieEnvSecret } from "./JaypieEnvSecret.js";
 export interface JaypieNextjsProps {
-    domainName?: string;
     datadogApiKeyArn?: string;
+    domainName?: string;
+    envSecrets?: {
+        [key: string]: secretsmanager.ISecret;
+    };
     hostedZone?: IHostedZone | string;
     nextjsPath?: string;
+    secrets?: JaypieEnvSecret[];
 }
 export declare class JaypieNextJs extends Construct {
     constructor(scope: Construct, id: string, props?: JaypieNextjsProps);

package/dist/esm/index.js

@@ -362,10 +362,11 @@ function envHostname({ component, domain, env, subdomain, } = {}) {
     const resolvedComponent = component === "@" || component === "" ? undefined : component;
     const resolvedSubdomain = subdomain || process.env.CDK_ENV_SUBDOMAIN;
     const resolvedEnv = env || process.env.PROJECT_ENV;
+    const filteredEnv = resolvedEnv === CDK$2.ENV.PRODUCTION ? undefined : resolvedEnv;
     const parts = [
         resolvedComponent,
         resolvedSubdomain,
-        resolvedEnv,
+        filteredEnv,
         resolvedDomain,
     ].filter((part) => part);
     return parts.join(".");
@@ -2168,10 +2169,30 @@ class JaypieNextJs extends Construct {
     constructor(scope, id, props) {
         super(scope, id);
         const domainName = props?.domainName || envHostname$1();
+        const domainNameSanitized = domainName
+            .replace(/\./g, "-")
+            .replace(/[^a-zA-Z0-9]/g, "_");
+        const envSecrets = props?.envSecrets || {};
         const nextjsPath = props?.nextjsPath?.startsWith("..")
             ? path.join(process.cwd(), props.nextjsPath)
             : props?.nextjsPath || path.join(process.cwd(), "..", "nextjs");
         const paramsAndSecrets = resolveParamsAndSecrets();
+        const secrets = props?.secrets || [];
+        // Process secrets environment variables
+        const secretsEnvironment = Object.entries(envSecrets).reduce((acc, [key, secret]) => ({
+            ...acc,
+            [`SECRET_${key}`]: secret.secretName,
+        }), {});
+        // Process JaypieEnvSecret array
+        const jaypieSecretsEnvironment = secrets.reduce((acc, secret) => {
+            if (secret.envKey) {
+                return {
+                    ...acc,
+                    [`SECRET_${secret.envKey}`]: secret.secretName,
+                };
+            }
+            return acc;
+        }, {});
         const nextjs = new Nextjs(this, "NextJsApp", {
             nextjsPath,
             domainProps: {
@@ -2180,14 +2201,26 @@ class JaypieNextJs extends Construct {
                     zone: props?.hostedZone,
                 }),
             },
-            environment: jaypieLambdaEnv$1(),
+            environment: {
+                ...jaypieLambdaEnv$1(),
+                ...secretsEnvironment,
+                ...jaypieSecretsEnvironment,
+            },
             overrides: {
-                nextjsServer: {
+                nextjsDistribution: {
+                    imageCachePolicyProps: {
+                        cachePolicyName: `NextJsImageCachePolicy-${domainNameSanitized}`,
+                    },
+                    serverCachePolicyProps: {
+                        cachePolicyName: `NextJsServerCachePolicy-${domainNameSanitized}`,
+                    },
+                },
+                nextjsImage: {
                     functionProps: {
                         paramsAndSecrets,
                     },
                 },
-                nextjsImage: {
+                nextjsServer: {
                     functionProps: {
                         paramsAndSecrets,
                     },
@@ -2196,6 +2229,14 @@ class JaypieNextJs extends Construct {
         });
         addDatadogLayers(nextjs.imageOptimizationFunction);
         addDatadogLayers(nextjs.serverFunction.lambdaFunction);
+        // Grant secret read permissions
+        Object.values(envSecrets).forEach((secret) => {
+            secret.grantRead(nextjs.serverFunction.lambdaFunction);
+        });
+        // Grant read permissions for JaypieEnvSecrets
+        secrets.forEach((secret) => {
+            secret.grantRead(nextjs.serverFunction.lambdaFunction);
+        });
     }
 }