@kirschbaum-development/sst-laravel 0.3.1 → 0.3.3

package/README.md

@@ -88,6 +88,44 @@ const app = new LaravelService('MyLaravelApp', {
 
 Check all the `web` options [here](https://github.com/kirschbaum-development/sst-laravel/blob/main/docs/api.md#web).
 
+### Reverb
+
+You can deploy a dedicated Laravel Reverb service for WebSocket traffic. Reverb runs as a worker-style container using `php artisan reverb:start`, but SST Laravel also attaches a load balancer so you can give it its own public domain.
+
+```js
+const app = new LaravelService('MyLaravelApp', {
+  web: {
+    domain: 'app.example.com',
+  },
+
+  reverb: {
+    domain: {
+      dns: sst.cloudflare.dns(),
+      name: 'ws.example.com',
+    },
+  },
+});
+
+return {
+  url: app.url,
+  reverbUrl: app.reverbUrl,
+};
+```
+
+When `reverb.domain` is configured, SST Laravel automatically injects the Reverb server variables:
+
+```env
+REVERB_SERVER_HOST=0.0.0.0
+REVERB_SERVER_PORT=8080
+REVERB_HOST=ws.example.com
+REVERB_PORT=443
+REVERB_SCHEME=https
+```
+
+If you enable horizontal scaling for Reverb, make sure your Laravel application is configured for Reverb scaling with Redis.
+
+Check all the `reverb` options [here](https://github.com/kirschbaum-development/sst-laravel/blob/main/docs/api.md#reverb).
+
 ### Workers
 
 Beyond HTTP requests, you can set up one or more `workers` for your Laravel application. Workers are meant to run background commands like Laravel Horizon, the Laravel Scheduler or any background command you may need to run.
@@ -407,6 +445,7 @@ This will list all running tasks in your cluster and let you choose which one to
 ```bash
 npx sst-laravel ssh web --stage production
 npx sst-laravel ssh worker --stage production
+npx sst-laravel ssh reverb --stage production
 ```
 
 If you are naming your workers differently, you can specify the worker name:
@@ -423,6 +462,7 @@ You can view the logs for your application using the `sst-laravel logs` command.
 ```bash
 npx sst-laravel logs {service} --stage production
 npx sst-laravel logs web --stage production
+npx sst-laravel logs reverb --stage production
 npx sst-laravel logs worker --stage production
 ```
 
@@ -474,7 +514,6 @@ In case your specified environment file does not contain the `APP_URL` variable,
 * Ability to extend base Docker images;
 * Add support for Inertia SSR;
 * Add support for Octane with FrankedPHP;
-* Add support for Laravel Reverb;
 * Dev mode;
 * ...what else are we missing?
 

package/dist/bin/cli.js

@@ -4,6 +4,7 @@ import * as fs from 'fs';
 import * as path from 'path';
 import { initCommand } from './commands/init.js';
 import { deployCommand } from './commands/deploy.js';
+import { commandRunCommand } from './commands/command-run.js';
 import { sshCommand } from './commands/ssh.js';
 import { logsCommand } from './commands/logs.js';
 import { githubIamCommand } from './commands/github-iam.js';
@@ -21,6 +22,7 @@ program
     .version(version);
 program.addCommand(initCommand);
 program.addCommand(deployCommand);
+program.addCommand(commandRunCommand);
 program.addCommand(sshCommand);
 program.addCommand(logsCommand);
 program.addCommand(githubIamCommand);

package/dist/bin/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../bin/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,cAAc,CAAC,CAAC;AACpE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;AAC1E,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;AAEpC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,aAAa,CAAC;KACnB,WAAW,CAAC,uCAAuC,CAAC;KACpD,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAChC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC/B,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAChC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;AACrC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AACnC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AACnC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AAEnC,OAAO,CAAC,KAAK,EAAE,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../bin/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,cAAc,CAAC,CAAC;AACpE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;AAC1E,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;AAEpC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,aAAa,CAAC;KACnB,WAAW,CAAC,uCAAuC,CAAC;KACpD,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAChC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;AACtC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC/B,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAChC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;AACrC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AACnC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AACnC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AAEnC,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/bin/commands/command-run.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare function buildCommandToRun(commandParts: string[], raw: boolean): string;
+export declare const commandRunCommand: Command;

package/dist/bin/commands/command-run.js

@@ -0,0 +1,69 @@
+import { Command } from 'commander';
+import { ECSClient } from '@aws-sdk/client-ecs';
+import { spawn } from 'child_process';
+import { findClusterArn, findTask } from '../utils/ecs.js';
+export function buildCommandToRun(commandParts, raw) {
+    if (commandParts.length === 0) {
+        throw new Error('Command is required.');
+    }
+    const command = commandParts.join(' ');
+    return raw ? command : `php artisan ${command}`;
+}
+export const commandRunCommand = new Command('command:run')
+    .description('Run a command in a running ECS task')
+    .argument('<command...>', 'Artisan command signature and options to run')
+    .allowUnknownOption(true)
+    .option('-s, --stage <stage>', 'SST stage name (required)')
+    .option('-c, --cluster <cluster>', 'ECS cluster name (optional, auto-detected from SST config)')
+    .option('-r, --region <region>', 'AWS region', process.env.AWS_REGION || 'us-east-1')
+    .option('--service <service>', 'Service to run the command against (web, worker, or worker name)', 'web')
+    .option('--container <container>', 'Container name override')
+    .option('--raw', 'Run the provided command instead of prefixing it with "php artisan"', false)
+    .action(async (commandParts, options) => {
+    try {
+        const region = options.region;
+        const stage = options.stage;
+        if (!stage) {
+            console.error('Error: Stage is required. Use --stage flag to specify the SST stage.');
+            process.exit(1);
+        }
+        const ecsClient = new ECSClient({ region });
+        const clusterArn = await findClusterArn(ecsClient, stage, options.cluster);
+        const matchingTask = await findTask(ecsClient, clusterArn, options.service, 'Select a task to run the command in:');
+        const taskId = matchingTask.taskArn?.split('/').pop();
+        const containerName = options.container || matchingTask.containers?.[0]?.name;
+        const command = buildCommandToRun(commandParts, options.raw);
+        if (!taskId) {
+            console.error('Error: Could not determine ECS task ID.');
+            process.exit(1);
+        }
+        if (!containerName) {
+            console.error('Error: Could not determine ECS container name.');
+            process.exit(1);
+        }
+        console.log(`Running command in task: ${taskId}`);
+        console.log(`Container: ${containerName}`);
+        console.log(`Command: ${command}`);
+        console.log('');
+        const awsCommand = spawn('aws', [
+            'ecs',
+            'execute-command',
+            '--cluster', clusterArn,
+            '--task', taskId,
+            '--container', containerName,
+            '--interactive',
+            '--command', command,
+        ], {
+            stdio: 'inherit',
+            env: { ...process.env, AWS_REGION: region },
+        });
+        awsCommand.on('exit', (code) => {
+            process.exit(code || 0);
+        });
+    }
+    catch (error) {
+        console.error('Error:', error.message);
+        process.exit(1);
+    }
+});
+//# sourceMappingURL=command-run.js.map

package/dist/bin/commands/command-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-run.js","sourceRoot":"","sources":["../../../bin/commands/command-run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAW3D,MAAM,UAAU,iBAAiB,CAAC,YAAsB,EAAE,GAAY;IACpE,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEvC,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,OAAO,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,OAAO,CAAC,aAAa,CAAC;KACxD,WAAW,CAAC,qCAAqC,CAAC;KAClD,QAAQ,CAAC,cAAc,EAAE,8CAA8C,CAAC;KACxE,kBAAkB,CAAC,IAAI,CAAC;KACxB,MAAM,CAAC,qBAAqB,EAAE,2BAA2B,CAAC;KAC1D,MAAM,CAAC,yBAAyB,EAAE,4DAA4D,CAAC;KAC/F,MAAM,CAAC,uBAAuB,EAAE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW,CAAC;KACpF,MAAM,CAAC,qBAAqB,EAAE,kEAAkE,EAAE,KAAK,CAAC;KACxG,MAAM,CAAC,yBAAyB,EAAE,yBAAyB,CAAC;KAC5D,MAAM,CAAC,OAAO,EAAE,qEAAqE,EAAE,KAAK,CAAC;KAC7F,MAAM,CAAC,KAAK,EAAE,YAAsB,EAAE,OAA0B,EAAE,EAAE;IACnE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAE5B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,sEAAsE,CAAC,CAAC;YACtF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3E,MAAM,YAAY,GAAG,MAAM,QAAQ,CACjC,SAAS,EACT,UAAU,EACV,OAAO,CAAC,OAAO,EACf,sCAAsC,CACvC,CAAC;QAEF,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACtD,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;QAC9E,MAAM,OAAO,GAAG,iBAAiB,CAAC,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAE7D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;YAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,cAAc,aAAa,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,YAAY,OAAO,EAAE,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,EAAE;YAC9B,KAAK;YACL,iBAAiB;YACjB,WAAW,EAAE,UAAU;YACvB,QAAQ,EAAE,MAAM;YAChB,aAAa,EAAE,aAAa;YAC5B,eAAe;YACf,WAAW,EAAE,OAAO;SACrB,EAAE;YACD,KAAK,EAAE,SAAS;YAChB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE;SAC5C,CAAC,CAAC;QAEH,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC7B,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC"}

package/docs/api.md

@@ -97,6 +97,9 @@ new LaravelService("Laravel", {
   web: {
     domain: "example.com"
   },
+  reverb: {
+    domain: "ws.example.com"
+  },
   config: {
     environment: {
       secrets: env
@@ -348,6 +351,103 @@ workers: [
 - **Type:** `ServiceArgs["permissions"]`
 - **Description:** IAM permissions specific to this worker.
 
+### `reverb`
+- **Type:** `boolean | LaravelReverbArgs`
+- **Default:** `false`
+- **Description:** Configuration for a dedicated Laravel Reverb service. When enabled, SST Laravel creates a worker-style service that runs `php artisan reverb:start` and exposes it through a load balancer.
+
+**Example:**
+```typescript
+reverb: {
+  domain: "ws.example.com",
+  scaling: {
+    min: 1,
+    max: 2
+  }
+}
+```
+
+You can also enable Reverb with defaults:
+
+```typescript
+reverb: true
+```
+
+#### `reverb.domain`
+- **Type:** `Input<string | { name: Input<string>; cert?: Input<string>; dns?: Input<false | Dns> }>`
+- **Description:** Custom domain for the Reverb service. If provided, SST Laravel routes HTTP and HTTPS traffic to Reverb's internal listener on port 8080 by default.
+
+**Example (with custom DNS provider):**
+```typescript
+reverb: {
+  domain: {
+    name: "ws.example.com",
+    dns: sst.cloudflare.dns()
+  }
+}
+```
+
+When `reverb.domain` is configured, SST Laravel auto-injects:
+
+```env
+REVERB_SERVER_HOST=0.0.0.0
+REVERB_SERVER_PORT=8080
+REVERB_HOST=ws.example.com
+REVERB_PORT=443
+REVERB_SCHEME=https
+```
+
+#### `reverb.host`
+- **Type:** `string`
+- **Default:** `"0.0.0.0"`
+- **Description:** Host the Reverb server listens on inside the container.
+
+#### `reverb.port`
+- **Type:** `number`
+- **Default:** `8080`
+- **Description:** Port the Reverb server listens on inside the container. The default load balancer forwards traffic to this port.
+
+#### `reverb.command`
+- **Type:** `string`
+- **Default:** `"php artisan reverb:start"`
+- **Description:** Command used to start the Reverb service.
+
+#### `reverb.architecture`
+- **Type:** `ServiceArgs["architecture"]`
+- **Description:** The CPU architecture for the Reverb service.
+
+#### `reverb.cpu`
+- **Type:** `ServiceArgs["cpu"]`
+- **Description:** CPU units for the Reverb service.
+
+#### `reverb.memory`
+- **Type:** `ServiceArgs["memory"]`
+- **Description:** Memory allocation for the Reverb service.
+
+#### `reverb.storage`
+- **Type:** `ServiceArgs["storage"]`
+- **Description:** Storage configuration for the Reverb service.
+
+#### `reverb.scaling`
+- **Type:** `ServiceArgs["scaling"]`
+- **Description:** Auto-scaling configuration for the Reverb service. Horizontal Reverb scaling requires Redis and `REVERB_SCALING_ENABLED=true` in your Laravel environment.
+
+#### `reverb.logging`
+- **Type:** `ServiceArgs["logging"]`
+- **Description:** Logging configuration for the Reverb service.
+
+#### `reverb.health`
+- **Type:** `ServiceArgs["health"]`
+- **Description:** ECS health check configuration for the Reverb service.
+
+#### `reverb.executionRole`
+- **Type:** `ServiceArgs["executionRole"]`
+- **Description:** Execution role for the Reverb service.
+
+#### `reverb.permissions`
+- **Type:** `ServiceArgs["permissions"]`
+- **Description:** IAM permissions specific to the Reverb service.
+
 ### `config`
 - **Type:** `object`
 - **Description:** Config settings.
@@ -449,6 +549,16 @@ const app = new LaravelService("MyApp", { ... });
 console.log(app.url); // https://example.com or https://xyz.elb.amazonaws.com
 ```
 
+### `reverbUrl`
+- **Type:** `Output<string>`
+- **Description:** The URL of the Reverb service. If `reverb.domain` is set, returns the custom domain URL. Otherwise, returns the auto-generated load balancer URL.
+
+**Example:**
+```typescript
+const app = new LaravelService("MyApp", { ... });
+console.log(app.reverbUrl); // https://ws.example.com or https://xyz.elb.amazonaws.com
+```
+
 ## Complete Example
 
 ```typescript
@@ -477,6 +587,14 @@ const app = new LaravelService("MyApp", {
       max: 10
     }
   },
+
+  reverb: {
+    domain: "ws.example.com",
+    scaling: {
+      min: 1,
+      max: 2
+    }
+  },
   
   workers: [
     {
@@ -510,7 +628,8 @@ const app = new LaravelService("MyApp", {
 });
 
 return {
-  url: app.url
+  url: app.url,
+  reverbUrl: app.reverbUrl
 };
 ```
 
@@ -537,6 +656,10 @@ const app = new LaravelService("MyApp", {
       max: 10
     }
   },
+
+  reverb: {
+    domain: "ws.example.com"
+  },
   
   workers: [
     {
@@ -565,6 +688,7 @@ const app = new LaravelService("MyApp", {
 
 return {
   url: app.url,
+  reverbUrl: app.reverbUrl,
   secretsPath: env.path
 };
 ```

package/laravel-sst.ts

@@ -25,6 +25,7 @@ import {
 import { RemoteEnvVault, RemoteEnvVaultArgs } from './src/laravel-env-manager';
 import { getPackagePath } from './src/config';
 import { RemoteEnvFile } from './src/remote-env-file';
+import { buildReverbEnvironmentVariables } from './src/reverb';
 import { getSecretsFingerprint } from './src/secrets-manager';
 
 // Re-export RemoteEnvVault for external use
@@ -44,6 +45,50 @@ enum ImageType {
     Cli = 'cli',
 }
 
+export type LaravelDomain = Input<
+    | string
+    | {
+          /**
+           * Domain name. You are able to use variables from the SST config file here.
+           *
+           * @example
+           * ```js
+           * domain: {
+           *   name: `${$app.stage}.example.com`,
+           * }
+           * ```
+           */
+          name: Input<string>;
+
+          /**
+           * Certificate ARN. Use this in case you are manually setting up the SSL certificate.
+           * This is usually needed when your DNS is not in the same AWS account or is outside of AWS.
+           *
+           * @example
+           * ```js
+           * domain: {
+           *   cert: 'arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012',
+           * }
+           * ```
+           */
+          cert?: Input<string>;
+
+          /**
+           * SST DNS configuration. You can use this configuration if your DNS is in Cloudflare or another AWS account.
+           *
+           * @see https://sst.dev/docs/component/cloudflare/dns/
+           * @see https://sst.dev/docs/component/aws/dns/
+           * @example
+           * ```js
+           * domain: {
+           *   dns: sst.cloudflare.dns(),
+           * }
+           * ```
+           */
+          dns?: Input<false | (Dns & {})>;
+      }
+>;
+
 export interface LaravelServiceArgs {
     architecture?: ServiceArgs['architecture'];
     cpu?: ServiceArgs['cpu'];
@@ -91,49 +136,35 @@ export interface LaravelWebArgs extends LaravelServiceArgs {
     /**
      * Custom domain for the web layer. (if you don't provide a domain name, you will be able to use the load balancer domain for testing (http only))
      */
-    domain?: Input<
-        | string
-        | {
-              /**
-               * Domain name. You are able to use variables from the SST config file here.
-               *
-               * @example
-               * ```js
-               * domain: {
-               *   name: `${$app.stage}.example.com`,
-               * }
-               * ```
-               */
-              name: Input<string>;
-
-              /**
-               * Certificate ARN. Use this in case you are manually setting up the SSL certificate.
-               * This is usually needed when your DNS is not in the same AWS account or is outside of AWS.
-               *
-               * @example
-               * ```js
-               * domain: {
-               *   cert: 'arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012',
-               * }
-               * ```
-               */
-              cert?: Input<string>;
-
-              /**
-               * SST DNS configuration. You can use this configuration if your DNS is in Cloudflare or another AWS account.
-               *
-               * @see https://sst.dev/docs/component/cloudflare/dns/
-               * @see https://sst.dev/docs/component/aws/dns/
-               * @example
-               * ```js
-               * domain: {
-               *   dns: sst.cloudflare.dns(),
-               * }
-               * ```
-               */
-              dns?: Input<false | (Dns & {})>;
-          }
-    >;
+    domain?: LaravelDomain;
+}
+
+export interface LaravelReverbArgs extends LaravelServiceArgs {
+    /**
+     * Custom domain for the Reverb service. When provided, Reverb requests are routed over HTTPS to the Reverb server running on port 8080 by default.
+     */
+    domain?: LaravelDomain;
+
+    /**
+     * Host the Reverb server listens on inside the container.
+     *
+     * @default `0.0.0.0`
+     */
+    host?: string;
+
+    /**
+     * Port the Reverb server listens on inside the container.
+     *
+     * @default `8080`
+     */
+    port?: number;
+
+    /**
+     * Command used to start Reverb.
+     *
+     * @default `php artisan reverb:start`
+     */
+    command?: string;
 }
 
 export interface LaravelWorkerConfig extends LaravelServiceArgs {
@@ -185,6 +216,11 @@ export interface LaravelArgs extends ClusterArgs {
      */
     workers?: LaravelWorkerConfig[];
 
+    /**
+     * If enabled, a public worker-style container will be created to run Laravel Reverb.
+     */
+    reverb?: boolean | LaravelReverbArgs;
+
     /**
      * Config settings.
      */
@@ -292,6 +328,7 @@ export class LaravelService extends Component {
         const sitePath = args.path ?? '.';
         const absSitePath = path.resolve(sitePath.toString());
         const nodeModulePath = getPackagePath();
+        const reverbConfig = normalizeReverbConfig(args.reverb);
 
         // Determine the path where our plugin will save build files.
         // SST sets __dirname to the .sst/platform directory.
@@ -375,7 +412,9 @@ export class LaravelService extends Component {
                             ? args.web.loadBalancer
                             : {
                                   domain: args.web?.domain,
-                                  ports: getDefaultPublicPorts(),
+                                  ports: getDefaultPublicPorts(
+                                      args.web?.domain,
+                                  ),
                               },
 
                     dev: {
@@ -472,6 +511,8 @@ export class LaravelService extends Component {
             workerConfig: LaravelWorkerConfig,
             serviceName: string,
             workerBuildPath: string,
+            serviceKey = serviceName,
+            devCommand = `php ${sitePath}/artisan horizon`,
         ) => {
             createWorkerTasks(workerConfig, workerBuildPath);
 
@@ -482,7 +523,7 @@ export class LaravelService extends Component {
                 CUSTOM_CONF_PATH: workerBuildPath.replace(absSitePath, ''),
             };
 
-            this.services[serviceName] = new sst.aws.Service(
+            this.services[serviceKey] = new sst.aws.Service(
                 serviceName,
                 {
                     cluster,
@@ -492,9 +533,10 @@ export class LaravelService extends Component {
                     image: getImage(ImageType.Worker, imgBuildArgs),
                     scaling: workerConfig.scaling,
                     environment: getEnvironmentVariables(),
+                    loadBalancer: workerConfig.loadBalancer,
 
                     dev: {
-                        command: `php ${sitePath}/artisan horizon`,
+                        command: devCommand,
                     },
 
                     transform: {
@@ -524,6 +566,44 @@ export class LaravelService extends Component {
             );
         };
 
+        function addReverbService() {
+            if (!reverbConfig) {
+                return;
+            }
+
+            const reverbPort: Port = `${reverbConfig.port}/http`;
+            const reverbWorkerConfig: LaravelWorkerConfig = {
+                ...reverbConfig,
+                name: 'reverb',
+                loadBalancer: reverbConfig.loadBalancer ?? {
+                    domain: reverbConfig.domain,
+                    ports: getDefaultPublicPorts(
+                        reverbConfig.domain,
+                        reverbConfig.port,
+                    ),
+                    health: {
+                        [reverbPort]: {
+                            path: '/apps',
+                            successCodes: '200-499',
+                        },
+                    },
+                },
+                tasks: {
+                    'laravel-reverb': {
+                        command: reverbConfig.command,
+                    },
+                },
+            };
+
+            createWorkerService(
+                reverbWorkerConfig,
+                `${name}-Reverb`,
+                path.resolve(pluginBuildPath, 'worker-reverb'),
+                'reverb',
+                `php ${sitePath}/artisan reverb:start`,
+            );
+        }
+
         function addWorkerServices() {
             args.workers?.forEach((workerConfig, index) => {
                 const workerName = workerConfig.name || `worker-${index + 1}`;
@@ -548,6 +628,10 @@ export class LaravelService extends Component {
             addWorkerServices();
         }
 
+        if (reverbConfig) {
+            addReverbService();
+        }
+
         function normalizeClusterVpc(
             vpc: LaravelArgs['vpc'],
         ): LaravelArgs['vpc'] {
@@ -576,13 +660,16 @@ export class LaravelService extends Component {
             };
         }
 
-        function getDefaultPublicPorts(): Ports {
+        function getDefaultPublicPorts(
+            domain?: LaravelDomain,
+            forwardPortNumber = 8080,
+        ): Ports {
             let ports;
-            const forwardPort: Port = '8080/http';
+            const forwardPort: Port = `${forwardPortNumber}/http`;
             const portHttp: Port = '80/http';
             const portHttps: Port = '443/https';
 
-            if (args.web?.domain) {
+            if (domain) {
                 ports = [
                     { listen: portHttp, forward: forwardPort },
                     { listen: portHttps, forward: forwardPort },
@@ -671,7 +758,12 @@ export class LaravelService extends Component {
         function getEnvironmentVariables() {
             const env = args.config?.environment?.vars || {};
 
-            return env;
+            return {
+                ...(shouldAutoInjectEnvironment()
+                    ? getReverbEnvironmentVariables()
+                    : {}),
+                ...env,
+            };
         }
 
         function getLinkedEnvironmentData() {
@@ -712,6 +804,7 @@ export class LaravelService extends Component {
                 linkedEnvironment: {
                     ...applyLinkedResourcesEnv(resources),
                     ...customEnv,
+                    ...getReverbEnvironmentVariables(),
                 },
                 linkedSecrets: extractSecrets(resources).map((secret) => ({
                     name: secret.name,
@@ -861,6 +954,82 @@ export class LaravelService extends Component {
             return undefined;
         }
 
+        function getReverbEnvironmentVariables() {
+            if (!reverbConfig) {
+                return {};
+            }
+
+            const publicHost = getDomainName(reverbConfig.domain);
+            const serverVariables = buildReverbEnvironmentVariables({
+                serverHost: reverbConfig.host,
+                serverPort: reverbConfig.port,
+            });
+
+            if (!publicHost) {
+                return serverVariables;
+            }
+
+            if (typeof publicHost === 'string') {
+                return buildReverbEnvironmentVariables({
+                    publicHost,
+                    serverHost: reverbConfig.host,
+                    serverPort: reverbConfig.port,
+                });
+            }
+
+            return {
+                ...serverVariables,
+                REVERB_HOST: publicHost,
+                REVERB_PORT: '443',
+                REVERB_SCHEME: 'https',
+            };
+        }
+
+        function shouldAutoInjectEnvironment(): boolean {
+            return args.config?.environment?.autoInject !== false;
+        }
+
+        function getDomainName(
+            domain?: LaravelDomain,
+        ): PulumiInput<string | undefined> | undefined {
+            if (!domain) {
+                return undefined;
+            }
+
+            if (typeof domain === 'string') {
+                return domain;
+            }
+
+            if (typeof domain === 'object' && 'name' in domain) {
+                return output((domain as { name: Input<string> }).name).apply(
+                    (domainName) => domainName || undefined,
+                );
+            }
+
+            return undefined;
+        }
+
+        function normalizeReverbConfig(
+            config?: boolean | LaravelReverbArgs,
+        ): (LaravelReverbArgs & {
+            command: string;
+            host: string;
+            port: number;
+        }) | undefined {
+            if (!config) {
+                return undefined;
+            }
+
+            const reverb = typeof config === 'boolean' ? {} : config;
+
+            return {
+                ...reverb,
+                command: reverb.command ?? 'php artisan reverb:start',
+                host: reverb.host ?? '0.0.0.0',
+                port: reverb.port ?? 8080,
+            };
+        }
+
         function prepareDeploymentScript() {
             const deployDir = path.resolve(pluginBuildPath, 'deploy');
             const dst = path.resolve(deployDir, '60-deploy.sh');
@@ -896,6 +1065,16 @@ export class LaravelService extends Component {
         return this.services['web'].url;
     }
 
+    /**
+     * The URL of the Reverb service.
+     *
+     * If `reverb.domain` is set, this is the URL with the custom domain.
+     * Otherwise, it's the auto-generated load balancer URL.
+     */
+    public get reverbUrl() {
+        return this.services['reverb'].url;
+    }
+
     /**
      * The messages from the service.
      *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kirschbaum-development/sst-laravel",
-  "version": "0.3.1",
+  "version": "0.3.3",
   "type": "module",
   "description": "An unofficial extension of SST to deploy containerized Laravel applications to AWS Fargate.",
   "main": "laravel-sst.ts",

package/src/reverb.ts

@@ -0,0 +1,26 @@
+export interface ReverbEnvironmentOptions {
+  serverHost?: string;
+  serverPort?: number;
+  publicHost?: string;
+  publicPort?: number;
+  publicScheme?: string;
+}
+
+export function buildReverbEnvironmentVariables(
+  options: ReverbEnvironmentOptions = {},
+): Record<string, string> {
+  const vars: Record<string, string> = {
+    REVERB_SERVER_HOST: options.serverHost ?? '0.0.0.0',
+    REVERB_SERVER_PORT: (options.serverPort ?? 8080).toString(),
+  };
+
+  if (!options.publicHost) {
+    return vars;
+  }
+
+  vars.REVERB_HOST = options.publicHost;
+  vars.REVERB_PORT = (options.publicPort ?? 443).toString();
+  vars.REVERB_SCHEME = options.publicScheme ?? 'https';
+
+  return vars;
+}

package/templates/sst.config.run.template

@@ -46,6 +46,15 @@
         }
       },
 
+      // this configuration will create a dedicated Reverb container for WebSocket traffic
+      // reverb: {
+      //   domain: {
+      //     name: $app.stage === "production"
+      //       ? "ws.example.com"
+      //       : `ws.${$app.stage}.example.com`,
+      //   },
+      // },
+
       // this configuration will create one worker container, which will run horizon and the laravel scheduler as background jobs
       workers: [
         {
@@ -57,4 +66,5 @@
 
     return {
       url: app.url,
+      // reverbUrl: app.reverbUrl,
     };