@maka/maka-cli 5.1.23 → 5.1.25

package/bundle/typescript/src/commands/deploy/galaxy.sub.cmd.js

@@ -0,0 +1,122 @@
+import path from 'path';
+import fs from 'fs';
+import { Command } from '../../command.js';
+import { Log } from '../../tools/log/log.class.js';
+import { Actions } from '../../tools/actions/actions.class.js';
+import DeployCommand from './deploy.command.js';
+Command.create({
+    name: 'galaxy',
+    aliases: ['g'],
+    usage: 'maka deploy galaxy',
+    validOpts: [
+        'debug',
+        'env',
+        'force',
+        'verbose',
+        'free',
+        'plan',
+        'delete',
+        'galaxySiteName'
+    ],
+    mustBeInMakaProject: true,
+    requiredOpts: ['env'],
+    shortDesc: 'Deploy your application',
+    description: `
+  Deploy your application to Galaxy, Meteor's hosting platform.
+  `,
+    examples: [
+        'maka deploy galaxy --env prod --free',
+        'maka deploy galaxy -e p --plan=professional | essentials',
+        'maka deploy galaxy -e p --delete',
+    ]
+}, async function (args, opts) {
+    const config = this.cfg.getMakaProjectConfig();
+    const env = this.cfg.getEnvFromShorthand(opts.env);
+    const configPath = this.cfg.getAppConfigPath(env);
+    const PKG_MGR = 'galaxy';
+    try {
+        let galaxyPlan = '';
+        if (PKG_MGR === 'galaxy') {
+            let siteName = opts.galaxySiteName;
+            if (!siteName) {
+                const defaultName = `${config.appName}-${env}`;
+                siteName = await Actions.ask(`Please provide a Galaxy site name [${defaultName}]:`) || defaultName;
+            }
+            const site = [siteName];
+            if (opts.delete) {
+                const confirm = await Actions.confirm('Are you sure you want to delete this app from Galaxy?');
+                if (confirm) {
+                    return this.mpi.invokeMeteorCommand('deploy', site.concat(['--delete']));
+                }
+                else {
+                    Log.notice('Aborting');
+                    return;
+                }
+            }
+            if (!opts.delete) {
+                if (!opts.plan && !opts.free) {
+                    const plan = await Actions.select({
+                        message: 'Select your Galaxy plan',
+                        name: 'plan',
+                        choices: [
+                            { name: 'Free', value: 'free' },
+                            { name: 'Essentials', value: 'essentials' },
+                            { name: 'Professional', value: 'professional' },
+                            { name: 'Performance', value: 'performance' },
+                            { name: 'Elite', value: 'elite' }
+                        ]
+                    });
+                    galaxyPlan = plan;
+                }
+                else if (opts.plan) {
+                    galaxyPlan = opts.plan;
+                }
+                else if (opts.free) {
+                    galaxyPlan = 'free';
+                }
+            }
+            let processArgv = [];
+            processArgv.forEach((arg, idx) => {
+                if (arg === '--env') {
+                    processArgv.splice(idx, 2);
+                }
+                if (arg === '-e') {
+                    processArgv.splice(idx, 2);
+                }
+            });
+            let settingsPath = path.join(configPath, 'settings.json');
+            // allow settings override
+            if (opts.settings) {
+                settingsPath = opts.settings;
+            }
+            if (this.fsi.isFile(settingsPath)) {
+                Log.notice('Meteor Settings: ' + settingsPath);
+                processArgv = processArgv.concat([
+                    '--settings',
+                    settingsPath
+                ]);
+                const rawSettings = fs.readFileSync(settingsPath);
+                const settingsJSON = JSON.parse(rawSettings.toString());
+                if (!settingsJSON['galaxy.meteor.com']) {
+                    Log.warn(`No "galaxy.meteor.com" settings found in ${env} settings.json.  See https://cloud-guide.meteor.com/environment-variables.html for info`);
+                }
+            }
+            else {
+                Log.warn('Cannot find Meteor Settings File: ' + settingsPath);
+            }
+            if (galaxyPlan === 'free') {
+                processArgv = processArgv.concat(['--free']);
+            }
+            else if (galaxyPlan) {
+                processArgv = processArgv.concat(['--plan', galaxyPlan]);
+            }
+            Log.warn(`You may be prompted to log into meteor.com to deploy to Galaxy.`);
+            return this.mpi.invokeMeteorCommand('deploy', site.concat(processArgv));
+        }
+    }
+    catch (e) {
+        Log.error('Error in deployment:');
+        Log.error(e);
+    }
+}, DeployCommand);
+//# sourceMappingURL=galaxy.sub.cmd.js.map

package/bundle/typescript/src/commands/deploy/galaxy.sub.cmd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"galaxy.sub.cmd.js","sourceRoot":"","sources":["../../../../../src/commands/deploy/galaxy.sub.cmd.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,GAAG,EAAE,MAAM,8BAA8B,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAC;AAE/D,OAAO,aAAa,MAAM,qBAAqB,CAAC;AAahD,OAAO,CAAC,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,CAAC,GAAG,CAAC;IACd,KAAK,EAAE,oBAAoB;IAC3B,SAAS,EAAE;QACT,OAAO;QACP,KAAK;QACL,OAAO;QACP,SAAS;QACT,MAAM;QACN,MAAM;QACN,QAAQ;QACR,gBAAgB;KACjB;IACD,mBAAmB,EAAE,IAAI;IACzB,YAAY,EAAE,CAAC,KAAK,CAAC;IACrB,SAAS,EAAE,yBAAyB;IACpC,WAAW,EAAE;;GAEZ;IACD,QAAQ,EAAE;QACR,sCAAsC;QACtC,0DAA0D;QAC1D,kCAAkC;KACnC;CACF,EAAE,KAAK,WAAW,IAAc,EAAE,IAAiB;IAElD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC;IAC/C,MAAM,GAAG,GAAW,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAW,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAE1D,MAAM,OAAO,GAAG,QAAQ,CAAC;IAEzB,IAAI,CAAC;QACH,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzB,IAAI,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC;YACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,WAAW,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC;gBAC/C,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,sCAAsC,WAAW,IAAI,CAAC,IAAI,WAAW,CAAC;YACrG,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;YAExB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,uDAAuD,CAAC,CAAC;gBAE/F,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBAC3E,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;oBACvB,OAAO;gBACT,CAAC;YACH,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBAC7B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC;wBAChC,OAAO,EAAE,yBAAyB;wBAClC,IAAI,EAAE,MAAM;wBACZ,OAAO,EAAE;4BACP,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE;4BAC/B,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE;4BAC3C,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,EAAE;4BAC/C,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE;4BAC7C,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;yBAClC;qBACF,CAAC,CAAC;oBAEH,UAAU,GAAG,IAAI,CAAC;gBACpB,CAAC;qBAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACrB,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC;gBACzB,CAAC;qBAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACrB,UAAU,GAAG,MAAM,CAAC;gBACtB,CAAC;YACH,CAAC;YAED,IAAI,WAAW,GAAa,EAAE,CAAC;YAE/B,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBAC/B,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;oBACpB,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC7B,CAAC;gBAED,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;oBACjB,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,IAAI,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;YAC1D,0BAA0B;YAC1B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC/B,CAAC;YAED,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;gBAClC,GAAG,CAAC,MAAM,CAAC,mBAAmB,GAAG,YAAY,CAAC,CAAC;gBAC/C,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC;oBAC/B,YAAY;oBACZ,YAAY;iBACb,CAAC,CAAC;gBAEH,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;gBAClD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACxD,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,EAAE,CAAC;oBACvC,GAAG,CAAC,IAAI,CAAC,4CAA4C,GAAG,yFAAyF,CAAC,CAAC;gBACrJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,CAAC,oCAAoC,GAAG,YAAY,CAAC,CAAC;YAChE,CAAC;YAED,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;gBAC1B,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC/C,CAAC;iBAAM,IAAI,UAAU,EAAE,CAAC;gBACtB,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;YAC3D,CAAC;YAED,GAAG,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;YAE5E,OAAO,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QAC1E,CAAC;IAEH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAClC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;AAEH,CAAC,EAAE,aAAa,CAAC,CAAC"}

package/bundle/typescript/src/commands/deploy/ubuntu.sub.cmd.d.ts

@@ -0,0 +1 @@
+export {};

package/bundle/typescript/src/commands/deploy/ubuntu.sub.cmd.js

@@ -0,0 +1,506 @@
+import path from 'path';
+import fs from 'fs';
+import { execSync } from 'child_process';
+import semver from 'semver';
+import { Command } from '../../command.js';
+import { Log } from '../../tools/log/log.class.js';
+import { SSH } from '../../tools/ssh/ssh.class.js';
+import { Actions } from '../../tools/actions/actions.class.js';
+import DeployCommand from './deploy.command.js';
+Command.create({
+    name: 'ubuntu',
+    usage: 'maka deploy:ubuntu',
+    aliases: ['u'],
+    validOpts: [
+        'debug',
+        'env',
+        'ssl',
+        'domains',
+        'mongo',
+        'force',
+        'email',
+        'verbose',
+        'noRebuild',
+        'letsencrypt'
+    ],
+    mustBeInMakaProject: true,
+    isPro: false,
+    requiredOpts: ['env'],
+    shortDesc: 'Deploy your application',
+    description: `
+  Deploy your app to an Ubuntu server running in AWS, On Prem,
+  or even ARM.`,
+    examples: [
+        'maka deploy:ubuntu --env prod',
+        'maka d:u -e p --mongo --ssl=letsencrypt --domains=www.maka-cli.com --email=admin@maka-cli.com',
+    ]
+}, async function (args, opts) {
+    const isVerbose = (opts.verbose) ? true : false;
+    const meteor = this.mpi.meteor;
+    const config = this.projectConfig;
+    const env = this.cfg.getEnvFromShorthand(opts.env);
+    const configPath = this.cfg.getAppConfigPath(env);
+    const NODE_VER = await this.fsi.getProjectsMeteorNodeVersion();
+    const [major, minor] = NODE_VER.split(".");
+    const FALLBACK_VERSION = `${major}.${minor}`;
+    const PKG_MGR = 'apt';
+    const useForce = opts.force;
+    try {
+        const PM2_CONFIG_PATH = path.join(configPath, 'pm2.config.js');
+        if (!this.fsi.isFile(PM2_CONFIG_PATH)) {
+            await this.scaffold.template({
+                srcPath: 'config/pm2.config.js',
+                destPath: PM2_CONFIG_PATH,
+                context: {
+                    app: config.appName,
+                    isDocker: false,
+                },
+                config
+            });
+        }
+        const SSH_CONFIG_PATH = path.join(configPath, 'ssh.json');
+        if (!this.fsi.isFile(SSH_CONFIG_PATH)) {
+            await this.scaffold.template({
+                srcPath: 'config/ssh.json',
+                destPath: SSH_CONFIG_PATH,
+                context: {
+                    app: config.appName
+                },
+                config
+            });
+        }
+        const SSH_CONFIG = JSON.parse(fs.readFileSync(SSH_CONFIG_PATH).toString());
+        const SSH_OPTIONS = { env: configPath, user: SSH_CONFIG.user, host: SSH_CONFIG.host, port: SSH_CONFIG.port, pem: SSH_CONFIG.pem };
+        let domainNames = opts.domains;
+        let emailUpdate = opts.email;
+        try {
+            fs.readFileSync(path.join(configPath, 'letsencrypt.json'));
+            Log.notice('Using letsencrypt.json');
+            opts.letsencrypt = true;
+        }
+        catch (e) {
+            if (opts.letsencrypt) {
+                Log.warn(`No letsencrypt.json file found. You will be prompted at the end of deployment for configuration.`);
+            }
+            const sslConfigChoices = {
+                message: 'Configure SSL',
+                name: 'sslAnswer',
+                choices: [
+                    { name: 'Free SSL with Letsencrypt', value: 'letsencrypt' },
+                    { name: 'Supplied SSL / CRT file', value: 'basic' },
+                    { name: 'No 🤔', value: 'none' }
+                ]
+            };
+            const sslAnswer = await Actions.select(sslConfigChoices);
+            if (sslAnswer === 'letsencrypt') {
+                opts.letsencrypt = true;
+                opts.ssl = false;
+                domainNames = (domainNames) ? domainNames : await Actions.ask('Domains to register (comma separated): ');
+                emailUpdate = (emailUpdate) ? emailUpdate : await Actions.ask('Email to use for auto-updates: ');
+                const letsEncryptConfig = {
+                    domainNames,
+                    emailUpdate
+                };
+                const data = JSON.stringify(letsEncryptConfig, null, 2);
+                fs.writeFileSync(path.join(configPath, 'letsencrypt.json'), data);
+                this.cfg.setEnvSettings(env, 'enforceCSP', true);
+            }
+            else if (sslAnswer === 'basic') {
+                opts.letsencrypt = false;
+                opts.ssl = true;
+                this.cfg.setEnvSettings(env, 'enforceCSP', true);
+            }
+            else {
+                this.cfg.setEnvSettings(env, 'enforceCSP', false);
+            }
+        }
+        let sslKey = '';
+        let sslCrt = '';
+        if (opts.ssl && !opts.letsencrypt) {
+            sslKey = config.appName + '.key';
+            if (!fs.existsSync(path.join(configPath, '_keys', sslKey))) {
+                sslKey = await Actions.ask('I could not find a valid SSL file, please provide the name of the SSL file in the _keys/ directory:');
+            }
+            if (!fs.existsSync(path.join(configPath, '_keys', sslKey))) {
+                throw 'You do not have a valid SSL file: ' + path.join(configPath, '_keys', sslKey);
+            }
+            sslCrt = config.appName + '.crt';
+            if (!fs.existsSync(path.join(configPath, '_keys', sslCrt))) {
+                sslCrt = await Actions.ask('I could not find a valid CRT file, please provide the name of the CRT file in the _keys/ directory:');
+            }
+            if (!fs.existsSync(path.join(configPath, '_keys', sslCrt))) {
+                throw 'You do not have a valid ssl crt.  Looking for: ' + path.join(configPath, '_keys', sslCrt);
+            }
+        }
+        Log.notice(`Checking remote host availability using ${SSH_CONFIG_PATH}`);
+        try {
+            const resp = SSH.ping('uname -a', SSH_OPTIONS, { verbose: true });
+            if (!resp)
+                throw 'Could not connect to remote host. Please check your ssh.json config file.';
+            if (resp)
+                Log.success('Remote host connection successful');
+        }
+        catch (e) {
+            Log.error(e);
+            return;
+        }
+        Log.notice('Building deployment script ...');
+        // Check if mongo needs to be installed
+        const pm2ConfigFile = fs.readFileSync(path.join(configPath, 'pm2.config.js'));
+        const mongoLine = this.fsi.grep(pm2ConfigFile.toString(), 'MONGO_URL');
+        if (mongoLine[0].trim().includes('localhost') || mongoLine[0].trim().includes('127.0.0.1') || mongoLine[0].trim().includes('0.0.0.0')) {
+            opts.mongo = true;
+            Log.notice('PM2 has MONGO_URL pointing to localhost; deployment will install a local mongo instance.');
+            Log.notice('-> ' + mongoLine[0].trim());
+        }
+        try {
+            const nginxFile = fs.createWriteStream(path.join(configPath, 'nginx.conf'), { flags: 'w' });
+            nginxFile.on('open', function () {
+                if (opts.ssl && !opts.letsencrypt) {
+                    nginxFile.write('server_tokens off;\n');
+                    nginxFile.write('map $http_upgrade $connection_upgrade {\n');
+                    nginxFile.write('\tdefault upgrade;\n');
+                    nginxFile.write('\t\'\'      close;\n');
+                    nginxFile.write('}\n');
+                    nginxFile.write('\n');
+                    nginxFile.write('server {\n');
+                    nginxFile.write('\tlisten 80 default_server;\n');
+                    nginxFile.write('\tlisten [::]:80 default_server ipv6only=on;\n');
+                    nginxFile.write(`\tserver_name ${config.appName};\n`);
+                    nginxFile.write('\troot /usr/share/nginx/html;\n');
+                    nginxFile.write('\tindex index.html index.htm;\n');
+                    nginxFile.write('\tlocation / {\n');
+                    nginxFile.write('\t\trewrite     ^ https://$server_name$request_uri? permanent;\n');
+                    nginxFile.write('\t}\n');
+                    nginxFile.write('}');
+                    nginxFile.write('\n');
+                    nginxFile.write('\n');
+                    nginxFile.write('server {\n');
+                    nginxFile.write('\tlisten 443 ssl;\n');
+                    nginxFile.write(`\tserver_name ${config.appName};\n`);
+                    nginxFile.write('\troot html;\n');
+                    nginxFile.write('\tindex index.html;\n');
+                    nginxFile.write('\tssl on;\n');
+                    nginxFile.write(`\tssl_certificate /etc/nginx/ssl/${config.appName}.crt;\n`);
+                    nginxFile.write(`\tssl_certificate_key /etc/nginx/ssl/${config.appName}.key;\n`);
+                    nginxFile.write(`\tssl_certificate ;\n`);
+                    nginxFile.write(`\tssl_certificate_key ;\n`);
+                    nginxFile.write('\tssl_session_cache shared:SSL:10m;\n');
+                    nginxFile.write('\tssl_session_timeout 5m;\n');
+                    nginxFile.write('\t\n');
+                    nginxFile.write('\tssl_prefer_server_ciphers on;\n');
+                    nginxFile.write('\tssl_protocols TLSv1 TLSv1.1 TLSv1.2;\n');
+                    nginxFile.write(`\tssl_ciphers "ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:kEDH+` +
+                        `AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:` +
+                        `ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-` +
+                        `SHA384:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:RC4-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK";\n`);
+                    nginxFile.write('\tadd_header Strict-Transport-Security "max-age=31536000;";\n');
+                    nginxFile.write('\t\n');
+                    nginxFile.write('\tif ($http_user_agent ~ "MSIE" ) {\n');
+                    nginxFile.write('\t\treturn 303 https://browser-update.org/update.html;\n');
+                    nginxFile.write('\t}\n');
+                    nginxFile.write('\tlocation = /favicon.ico {\n');
+                    nginxFile.write(`\t\talias /home/${SSH_CONFIG.user}/bundle/programs/web.browser/app;\n`);
+                    nginxFile.write('\t}\n');
+                    nginxFile.write('\t\n');
+                    nginxFile.write('\tlocation / {\n');
+                    nginxFile.write('\t\tproxy_pass http://0.0.0.0:3000;\n');
+                    nginxFile.write('\t\tproxy_http_version 1.1;\n');
+                    nginxFile.write('\t\tproxy_set_header Upgrade $http_upgrade;\n');
+                    nginxFile.write('\t\tproxy_set_header Connection "upgrade";\n');
+                    nginxFile.write('\t\tproxy_set_header X-Forwarded-For $remote_addr;\n');
+                    nginxFile.write('\t\tproxy_set_header Host $host;\n');
+                    nginxFile.write(`\t\tif ($uri != '\/') {\n`);
+                    nginxFile.write('\t\t\texpires 30d;\n');
+                    nginxFile.write('\t\t}\n');
+                    nginxFile.write('\t}\n');
+                    nginxFile.write('}');
+                }
+                else {
+                    nginxFile.write('server_tokens off;\n');
+                    nginxFile.write('map $http_upgrade $connection_upgrade {\n');
+                    nginxFile.write('\tdefault upgrade;\n');
+                    nginxFile.write('\t\'\'      close;\n');
+                    nginxFile.write('}\n');
+                    nginxFile.write('\n');
+                    nginxFile.write('server {\n');
+                    nginxFile.write('\tlisten 80 default_server;\n');
+                    nginxFile.write('\tlisten [::]:80 default_server ipv6only=on;\n');
+                    nginxFile.write('\tif ($http_user_agent ~ "MSIE" ) {\n');
+                    nginxFile.write('\t\treturn 303 https://browser-update.org/update.html;\n');
+                    nginxFile.write('\t}\n');
+                    nginxFile.write('\tlocation = /favicon.ico {\n');
+                    nginxFile.write(`\t\talias /home/${SSH_CONFIG.user}/bundle/programs/web.browser/app;\n`);
+                    nginxFile.write('\t}\n');
+                    nginxFile.write('\t\n');
+                    nginxFile.write('\tlocation / {\n');
+                    nginxFile.write('\t\tproxy_pass http://0.0.0.0:3000;\n');
+                    nginxFile.write('\t\tproxy_http_version 1.1;\n');
+                    nginxFile.write('\t\tproxy_set_header Upgrade $http_upgrade;\n');
+                    nginxFile.write('\t\tproxy_set_header Connection "upgrade";\n');
+                    nginxFile.write('\t\tproxy_set_header X-Forwarded-For $remote_addr;\n');
+                    nginxFile.write('\t\tproxy_set_header Host $host;\n');
+                    nginxFile.write(`\t\tif ($uri != '\/') {\n`);
+                    nginxFile.write('\t\t\texpires 30d;\n');
+                    nginxFile.write('\t\t}\n');
+                    nginxFile.write('\t}\n');
+                    nginxFile.write('}');
+                }
+            });
+            nginxFile.on('finish', function () {
+                nginxFile.end();
+            });
+            // df is deployFile
+            const df = fs.createWriteStream(path.join(configPath, 'deploy.sh'), { flags: 'w' });
+            df.on('open', function () {
+                df.write('sudo apt-get update\n');
+                df.write('# install git and nginx\n');
+                df.write('sudo ' + PKG_MGR + ' install build-essential git nginx -y\n');
+                if (opts.mongo === true) {
+                    df.write('# install and configure local mongo\n');
+                    df.write('wget -qO - https://www.mongodb.org/static/pgp/server-4.2.asc | sudo apt-key add -\n');
+                    df.write('echo "deb [ arch=amd64 ] https://repo.mongodb.org/apt/ubuntu bionic/mongodb-org/4.2 multiverse" | sudo tee /etc/apt/sources.list.d/mongodb-org-4.2.list\n');
+                    df.write('sudo apt-get update\n');
+                    df.write('sudo apt-get install -y mongodb-org\n');
+                    df.write('sudo service mongod start\n');
+                    df.write('sudo systemctl enable mongod.service\n');
+                }
+                df.write('# setup node and npm with the proper node version using nvm\n');
+                df.write('git clone https://gist.github.com/c427ccd6f4377b39299b9d402f5d51fe.git ~/maka-env/nvm-install\n');
+                df.write('rm -rf ~/.bash_profile ~/.bashrc\n');
+                df.write('touch ~/.bash_profile ~/.bashrc\n');
+                df.write('echo "test -f ~/.bashrc && . ~/.bashrc" > ~/.bash_profile\n');
+                df.write('chmod +x ~/maka-env/nvm-install/nvm-install.sh && ~/maka-env/nvm-install/nvm-install.sh\n');
+                df.write('source ~/.bashrc\n');
+                df.write(`nvm install ${NODE_VER} || nvm install ${FALLBACK_VERSION}\n`);
+                df.write(`[ "$(nvm current)" == "${NODE_VER}" ] && nvm alias default ${NODE_VER} || nvm alias default ${FALLBACK_VERSION}\n`);
+                df.write('npm install -g pm2@latest\n');
+                df.write('pm2 install pm2-logrotate\n');
+                df.write('pm2 set pm2-logrotate:max_size 20M\n');
+                df.write('pm2 set pm2-logrotate:compress true\n');
+                df.write('pm2 set pm2-logrotate:retain 30\n');
+                df.write('rm -rf ~/maka-env/nvm-install\n');
+                df.write('# Prepare nginx\n');
+                df.write('[ -d /etc/systemd/system/nginx.service.d ] && echo "nginx.service.d exists" || sudo mkdir /etc/systemd/system/nginx.service.d\n');
+                df.write('printf "[Service]\\nExecStartPost=/bin/sleep 0.1\\n" > override.conf\n');
+                df.write('sudo cp override.conf /etc/systemd/system/nginx.service.d/override.conf\n');
+                df.write('sudo systemctl daemon-reload || null\n');
+                df.write('sudo systemctl stop nginx\n');
+                df.write('sudo nginx -s stop\n');
+                df.write('# Nginx will be restarted just before completing the deployment.\n');
+                df.write('sudo cp ~/nginx.conf /etc/nginx/sites-enabled/default\n');
+                if (opts.ssl && !opts.letsencrypt) {
+                    df.write('sudo mkdir -p /etc/nginx/ssl/\n');
+                    df.write('sudo mv ~/' + sslKey + ' /etc/nginx/ssl/' + sslKey + '\n');
+                    df.write('sudo mv ~/' + sslCrt + ' /etc/nginx/ssl/' + sslCrt + '\n');
+                }
+                df.write('# Decompress the bundle\n');
+                df.write('echo "Attempting to decompress the bundle"\n');
+                df.write('if [ -f app.tar.gz ]; then\n');
+                df.write('  echo "Bundle found, decompressing"\n');
+                df.write('  tar -xf app.tar.gz\n');
+                df.write('elif [ -f app.tar.gz.bk ]; then\n');
+                df.write('  echo "No bundle found, using backup"\n');
+                df.write('  cp app.tar.gz.bk app.tar.gz\n');
+                df.write('  tar -xf app.tar.gz\n');
+                df.write('else\n');
+                df.write('  echo "Could not find app.tar.gz, exiting!"\n');
+                df.write('  exit 1\n');
+                df.write('fi\n');
+                df.write('cd bundle/programs/server\n');
+                df.write('npm install\n');
+                df.write('npm audit fix --force\n');
+                df.write('cd ~\n');
+                df.write('# Reset pm2 \n');
+                df.write('pm2 delete all\n');
+                df.write('# updating PM2 to latest\n');
+                df.write('pm2 update\n');
+                df.write('# Bring up pm2 with environment\n');
+                df.write('pm2 start ~/pm2.config.js\n');
+                df.write('# Configure pm2 to start on boot\n');
+                df.write('pm2 startup\n');
+                df.write('sudo env PATH=$PATH:$(which npm) $(which pm2) startup systemd -u ' + SSH_CONFIG.user + ' --hp /home/' + SSH_CONFIG.user + '\n');
+                //df.write('pm2 startup systemd -u ' + SSH_CONFIG.user + ' --hp /home/' + SSH_CONFIG.user + '\n');
+                df.write('pm2 save\n');
+                df.write('# bring back up nginx\n');
+                df.write('sudo systemctl daemon-reload && sudo systemctl start nginx\n');
+                df.write('# remove backup tar, if any\n');
+                df.write('# rm -f ~/app.tar.gz.bk\n');
+                df.write('# backup tar bundle\n');
+                df.write(`mv ~/app.tar.gz ~/app.tar.gz.bk\n`);
+                df.write('exit 0');
+            });
+            df.on('finish', function () {
+                df.end();
+            });
+            Log.success('Deployment script written to: ' + path.join(configPath, 'deploy.sh'));
+            if (!useForce) {
+                const confirmScript = await Actions.confirm('Are you ready to deploy?');
+                if (!confirmScript) {
+                    throw 'Aborted deployment!';
+                }
+            }
+            const projectDirectory = this.fsi.findProjectDirectory();
+            let buildArgs = [];
+            if (projectDirectory !== undefined) {
+                buildArgs = ['build', path.join(projectDirectory, 'build'), '--architecture=os.linux.x86_64'];
+            }
+            // Make sure to set the server option if this is a mobile platform.  Basically, because browser
+            // and server are required for a mobile platform, if there are more than two items in
+            // the platforms file, we can assume it's a mobile build.
+            try {
+                if (projectDirectory !== undefined) {
+                    const platforms = this.fsi.readFileLines(path.join(projectDirectory, 'app', '.meteor', 'platforms'));
+                    const isMobile = (platforms.length > 2) ? true : false;
+                    if (isMobile) {
+                        const server = (config.serverName) ? config.serverName : await Actions.ask('Mobile server IP or fully qualified domain name (FQDN): ');
+                        const port = (config.serverPort) ? config.serverPort : await Actions.ask('Mobile server port: ');
+                        if (server.length == 0 || port.length == 0)
+                            throw '[!] Server name or port number are not long enough!';
+                        const httpPort = (port == '443') ? 'https' : 'http';
+                        buildArgs.push('--server=' + httpPort + '://' + server + ':' + port);
+                        if (!config.serverName && !config.serverPort) {
+                            const confirm = await Actions.ask('Would you like to save the server config in your .maka/config.json file? [yn]');
+                            if (confirm) {
+                                this.cfg.setProjectConfig('serverName', server);
+                                this.cfg.setProjectConfig('serverPort', port);
+                                Log.notice('Stored server config to ' + path.join('.maka', 'config.json'));
+                            }
+                        }
+                    }
+                }
+            }
+            catch (e) {
+                Log.error(e);
+                return;
+            }
+            const bundle = path.join(this.fsi.findProjectDirectory(), 'build', 'app.tar.gz');
+            const globalMeteorVersion = this.mpi.getGlobalMeteorVersion();
+            const projectMeteorVersion = this.fsi.getProjectMeteorVersion();
+            let isOutdated = false; // Default value in case of an error
+            try {
+                Log.notice('Checking lastest version of Meteor installed against this project');
+                isOutdated = semver.gt(globalMeteorVersion, projectMeteorVersion);
+            }
+            catch (error) {
+                Log.notice(`Error comparing versions: ${error}`);
+            }
+            if (isOutdated && !useForce) {
+                const haltFromVersion = await Actions.confirm(`This project's meteor version (${projectMeteorVersion}) is behind your installed meteor version (${globalMeteorVersion}). Continue?`, false);
+                if (!haltFromVersion) {
+                    Log.error('Aborted');
+                    Log.notice(`Consider updating with "maka update --release ${globalMeteorVersion}"`);
+                    return;
+                }
+            }
+            let shouldRebuild = true;
+            if (fs.existsSync(bundle) && !useForce) {
+                shouldRebuild = await Actions.confirm('Found existing bundle, would you like to rebuild it?');
+            }
+            if (shouldRebuild) {
+                execSync(`npm install`, { cwd: this.fsi.findAppDirectory(), stdio: 'ignore' });
+                execSync(`${meteor} ${buildArgs.join(' ')}`, { cwd: this.fsi.findAppDirectory(), stdio: 'inherit' });
+            }
+            Log.notice('Pushing up bundle ...');
+            const bundleSCP = { source: bundle, dest: '~/app.tar.gz', verbose: true };
+            SSH.scp(bundleSCP, SSH_OPTIONS);
+            Log.notice('Pushing up deploy scripts ...');
+            const deploySh = path.join(configPath, 'deploy.sh');
+            const deployShSCP = { source: deploySh, dest: '~/deploy.sh', verbose: true };
+            SSH.scp(deployShSCP, SSH_OPTIONS);
+            const nginxConf = path.join(configPath, 'nginx.conf');
+            const nginxConfSCP = { source: nginxConf, dest: '~/nginx.conf', verbose: true };
+            SSH.scp(nginxConfSCP, SSH_OPTIONS);
+            const pm2Conf = path.join(configPath, 'pm2.config.js');
+            const pm2ConfSCP = { source: pm2Conf, dest: '~/pm2.config.js', verbose: true };
+            SSH.scp(pm2ConfSCP, SSH_OPTIONS);
+            const settings = path.join(configPath, 'settings.json');
+            const settingsSCP = { source: settings, dest: '~/settings.json', verbose: true };
+            SSH.scp(settingsSCP, SSH_OPTIONS);
+            if (opts.ssl && !opts.letsencrypt) {
+                sslKey = path.join(configPath, '_keys', sslKey);
+                const sslKeySCP = { source: sslKey, dest: sslKey };
+                SSH.scp(sslKeySCP, SSH_OPTIONS);
+                sslCrt = path.join(configPath, '_keys', sslCrt);
+                const sslCrtSCP = { source: sslCrt, dest: sslCrt };
+                SSH.scp(sslCrtSCP, SSH_OPTIONS);
+            }
+            const sesConfig = path.join(configPath, '_keys', 'ses.json');
+            if (fs.existsSync(sesConfig)) {
+                const sesConfigSCP = { source: sesConfig, dest: '~/ses.json', verbose: true };
+                SSH.scp(sesConfigSCP, SSH_OPTIONS);
+            }
+            const runDeployScriptsMsg = 'Running deployment scripts on remote server';
+            await SSH.ssh('chmod +x ~/deploy.sh && ./deploy.sh', SSH_OPTIONS, { verbose: isVerbose, message: runDeployScriptsMsg });
+            Log.notice('Verifying Nginx');
+            SSH.sshSync('echo "" && sudo systemctl status nginx | grep Active && echo ""', SSH_OPTIONS, { tty: true, verbose: true });
+            Log.notice('Verifying PM2');
+            SSH.sshSync('source ~/.bashrc && echo "" && pm2 status && echo ""', SSH_OPTIONS, { tty: true, verbose: true });
+            Log.success('Deployed to: ' + SSH_CONFIG.host);
+            if (opts.letsencrypt) {
+                Log.notice('Attempting to setup SSL using LetsEncrypt');
+                try {
+                    const letsencryptData = fs.readFileSync(path.join(configPath, 'letsencrypt.json'));
+                    const jsonConfig = JSON.parse(letsencryptData.toString());
+                    domainNames = (opts.domains) ? opts.domains : jsonConfig.domainNames;
+                    emailUpdate = (opts.email) ? opts.email : jsonConfig.emailUpdate;
+                    if (!opts.email || !opts.domains) {
+                        Log.notice('Using saved letsencrypt config');
+                    }
+                }
+                catch (e) {
+                    Log.warn(`Warning: ${e}`);
+                    // nop
+                }
+                Log.notice('Setting up letsencrypt');
+                const IGNORE_ERRORS = [
+                    "snap \"core\" is already installed",
+                    "snap \"core\" has no updates available",
+                    "snap \"certbot\" is already installed",
+                    "ln: failed to create symbolic link '/usr/bin/certbot': File exists",
+                    "Certificate not yet due for renewal"
+                ];
+                function runCommand(command) {
+                    try {
+                        // Capture the output without displaying it
+                        const result = SSH.sshSync(command, SSH_OPTIONS, { tty: true, verbose: true, silentOutput: true });
+                        if (result) {
+                            // Check for errors and determine if they should be ignored
+                            const shouldIgnore = IGNORE_ERRORS.some(err => result.stderr.includes(err));
+                            if (result.status !== 0 && !shouldIgnore) {
+                                Log.error(`Error running command: ${command}`);
+                            }
+                            else if (result.stdout) {
+                                Log.success(result.stdout);
+                            }
+                        }
+                        else {
+                            Log.error(`Unexpected error: No result received from command: ${command}`);
+                        }
+                    }
+                    catch (error) {
+                        Log.error(`Unexpected error while running: ${command}`);
+                    }
+                }
+                // Run commands with error handling
+                runCommand('sudo snap install core; sudo snap refresh core');
+                runCommand('sudo snap install --classic certbot');
+                runCommand('sudo ln -s /snap/bin/certbot /usr/bin/certbot');
+                runCommand(`sudo certbot --nginx --agree-tos --expand -n --domains ${domainNames} --email ${emailUpdate}`);
+            }
+            Log.success('Deployment complete');
+        }
+        catch (e) {
+            Log.error(`Error in deployment:`);
+            Log.error(e);
+        }
+        // remove deploy and any platforms
+        //let r = args.concat(_.without(process.argv.slice(2), 'deploy', args[0]));
+        //return this.invokeMeteorCommand('deploy', r);
+    }
+    catch (e) {
+        Log.error('Error in deployment:');
+        Log.error(e);
+    }
+}, DeployCommand);
+//# sourceMappingURL=ubuntu.sub.cmd.js.map