@ossy/deployment-tools 1.17.9 → 1.17.11

package/CHANGELOG.md

@@ -3,6 +3,22 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## 1.17.11 (2026-05-25)
+
+**Note:** Version bump only for package @ossy/deployment-tools
+
+
+
+
+
+## 1.17.10 (2026-05-25)
+
+**Note:** Version bump only for package @ossy/deployment-tools
+
+
+
+
+
 ## 1.17.9 (2026-05-25)
 
 **Note:** Version bump only for package @ossy/deployment-tools

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ossy/deployment-tools",
-  "version": "1.17.9",
+  "version": "1.17.11",
   "description": "Collection of scripts and tools to aid deployment of containers and static files to Amazon Web Services through GitHub Actions",
   "source": "./src/index.js",
   "main": "./src/index.js",
@@ -26,5 +26,5 @@
   "devDependencies": {
     "jest": "^27.5.1"
   },
-  "gitHead": "295c9447b738f39dc81a9f250f06acc97efa76b9"
+  "gitHead": "c50aee3d73f8c3f71ce2d8a91e9be2de90c6c4d9"
 }

package/src/infrastructure/container-deployment-target/caddy.service.js

@@ -15,6 +15,32 @@ api.ossy.se {
   reverse_proxy localhost:3001
 }
 
+# TODO: remove this block once ossy.se traffic flows through the platform runtime.
+# Once ossy app publish is validated for ossy.se, delete this block and the
+# ossy-website-ossy.service so the catch-all below serves it via the platform.
+ossy.se {
+  tls {
+    dns route53 {
+      max_retries 10
+      profile ci-client
+    }
+  }
+  reverse_proxy localhost:3002
+}
+
+# TODO: remove this block once www.plexus-sanitas.com traffic flows through the platform runtime.
+# Once ossy app publish is validated for plexus-sanitas, delete this block and the
+# ossy-website-plexus-sanitas.service so the catch-all below serves it via the platform.
+www.plexus-sanitas.com {
+  tls {
+    dns route53 {
+      max_retries 10
+      profile ci-client
+    }
+  }
+  reverse_proxy localhost:3003
+}
+
 :443 {
   tls {
     on_demand

package/src/infrastructure/container-deployment-target/container-deployment-target.js

@@ -19,6 +19,8 @@ const { getInstallNodeJs, getInstallNpm, getInstallDocker } = require('./user-da
 const { CaddyService } = require('./caddy.service')
 const { OssyRuntimeService } = require('./ossy-runtime.service')
 const { OssyApiService } = require('./ossy-api.service')
+const { OssyWebsiteOssyService } = require('./ossy-website-ossy.service')
+const { OssyWebsitePlexusSanitasService } = require('./ossy-website-plexus-sanitas.service')
 const { AwsProfile } = require('./aws-profile')
 const { SupportedRegions } = require('../../config')
 
@@ -120,7 +122,9 @@ class ContainerDeploymentTarget extends Construct {
       'docker network create ossy-network || true',
       ...CaddyService.install(),
       ...OssyRuntimeService.install(),
-      ...OssyApiService.install()
+      ...OssyApiService.install(),
+      ...OssyWebsiteOssyService.install(),
+      ...OssyWebsitePlexusSanitasService.install()
     )
 
     userData.addS3DownloadCommand({
@@ -136,7 +140,11 @@ class ContainerDeploymentTarget extends Construct {
       ...OssyRuntimeService.enable(),
       ...OssyRuntimeService.start(),
       ...OssyApiService.enable(),
-      ...OssyApiService.start()
+      ...OssyApiService.start(),
+      ...OssyWebsiteOssyService.enable(),
+      ...OssyWebsiteOssyService.start(),
+      ...OssyWebsitePlexusSanitasService.enable(),
+      ...OssyWebsitePlexusSanitasService.start()
     )
 
     const ec2Instance = new Instance(this, 'Ec2Instance', {

package/src/infrastructure/container-deployment-target/ossy-website-ossy.service.js

@@ -0,0 +1,52 @@
+// TODO: remove this service once ossy.se traffic flows through the platform runtime.
+// The platform runtime (ghcr.io/ossy-se/platform) is the long-term host for all
+// tenant sites including ossy.se. This service is a stopgap while the CMS-based
+// publish flow is validated in production.
+
+const systemdServiceFile = `
+[Unit]
+Description=Ossy Website (ossy.se)
+After=network.target docker.service
+Requires=docker.service
+
+[Service]
+EnvironmentFile=/etc/environment
+ExecStartPre=-/usr/bin/docker rm -f ossy-website-ossy
+ExecStartPre=/usr/bin/docker pull ghcr.io/ossy-se/website-ossy:latest
+ExecStart=/usr/bin/docker run --name ossy-website-ossy \\
+  --network ossy-network \\
+  -p 3002:3000 \\
+  -e PORT=3000 \\
+  -e OSSY_API_URL=http://ossy-api:3001 \\
+  -e OSSY_COOKIE_SECRET=\${OSSY_COOKIE_SECRET} \\
+  ghcr.io/ossy-se/website-ossy:latest
+ExecStop=/usr/bin/docker stop ossy-website-ossy
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+`
+
+/**
+  * @class
+*/
+class OssyWebsiteOssyService {
+
+  static install() {
+    return [`sudo tee /etc/systemd/system/ossy-website-ossy.service > /dev/null << 'EOF'\n${systemdServiceFile}\nEOF`]
+  }
+
+  static enable() {
+    return ['sudo systemctl enable ossy-website-ossy']
+  }
+
+  static start() {
+    return ['sudo systemctl start ossy-website-ossy']
+  }
+
+}
+
+module.exports = {
+  OssyWebsiteOssyService
+}

package/src/infrastructure/container-deployment-target/ossy-website-plexus-sanitas.service.js

@@ -0,0 +1,52 @@
+// TODO: remove this service once www.plexus-sanitas.com traffic flows through the platform runtime.
+// The platform runtime (ghcr.io/ossy-se/platform) is the long-term host for all
+// tenant sites including plexus-sanitas. This service is a stopgap while the CMS-based
+// publish flow is validated in production.
+
+const systemdServiceFile = `
+[Unit]
+Description=Ossy Website (www.plexus-sanitas.com)
+After=network.target docker.service
+Requires=docker.service
+
+[Service]
+EnvironmentFile=/etc/environment
+ExecStartPre=-/usr/bin/docker rm -f ossy-website-plexus-sanitas
+ExecStartPre=/usr/bin/docker pull ghcr.io/ossy-se/website-plexus-sanitas:latest
+ExecStart=/usr/bin/docker run --name ossy-website-plexus-sanitas \\
+  --network ossy-network \\
+  -p 3003:3000 \\
+  -e PORT=3000 \\
+  -e OSSY_API_URL=http://ossy-api:3001 \\
+  -e OSSY_COOKIE_SECRET=\${OSSY_COOKIE_SECRET} \\
+  ghcr.io/ossy-se/website-plexus-sanitas:latest
+ExecStop=/usr/bin/docker stop ossy-website-plexus-sanitas
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+`
+
+/**
+  * @class
+*/
+class OssyWebsitePlexusSanitasService {
+
+  static install() {
+    return [`sudo tee /etc/systemd/system/ossy-website-plexus-sanitas.service > /dev/null << 'EOF'\n${systemdServiceFile}\nEOF`]
+  }
+
+  static enable() {
+    return ['sudo systemctl enable ossy-website-plexus-sanitas']
+  }
+
+  static start() {
+    return ['sudo systemctl start ossy-website-plexus-sanitas']
+  }
+
+}
+
+module.exports = {
+  OssyWebsitePlexusSanitasService
+}