@ossy/deployment-tools 3.0.9 → 3.4.0

package/src/infrastructure/container-deployment-target/container-service.js

@@ -1,162 +0,0 @@
-/**
- * @typedef {'http'|'tcp'} ServiceType
- *
- * @typedef {Object} HttpServiceConfig
- * @property {'http'} [type]   - defaults to 'http'
- * @property {string} name     - unique name, used for container name and systemd unit
- * @property {string} domain   - domain this service handles (Caddy block + Route53)
- * @property {string} image    - Docker image to run
- *
- * @typedef {Object} TcpServiceConfig
- * @property {'tcp'} type      - marks this as a raw TCP/UDP service (no HTTP/Caddy)
- * @property {string} name     - unique name, used for container name and systemd unit
- * @property {string} image    - Docker image to run
- * @property {number[]} ports  - ports to expose directly (same inside and outside container)
- * @property {'tcp'|'udp'|'both'} [protocol] - defaults to 'tcp'
- *
- * @typedef {HttpServiceConfig|TcpServiceConfig} ContainerServiceConfig
- */
-
-const BASE_HTTP_PORT = 3002 // 3000 = platform runtime, 3001 = API
-
-// ---------------------------------------------------------------------------
-// HTTP service — reverse-proxied through Caddy, container listens on port 3000
-// ---------------------------------------------------------------------------
-
-class HttpContainerService {
-  constructor({ name, domain, image }, httpIndex) {
-    this.name = name
-    this.domain = domain
-    this.image = image
-    this.hostPort = BASE_HTTP_PORT + httpIndex
-  }
-
-  get systemdUnitFile() {
-    return `
-[Unit]
-Description=Container service: ${this.name} (${this.domain})
-After=network.target docker.service
-Requires=docker.service
-
-[Service]
-EnvironmentFile=/etc/environment
-ExecStartPre=-/usr/bin/docker rm -f ${this.name}
-ExecStartPre=/usr/bin/docker pull ${this.image}
-ExecStart=/usr/bin/docker run --name ${this.name} \\
-  --network ossy-network \\
-  -p ${this.hostPort}:3000 \\
-  --env-file /etc/environment \\
-  ${this.image}
-ExecStop=/usr/bin/docker stop ${this.name}
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-`
-  }
-
-  get caddyBlock() {
-    return `
-${this.domain} {
-  tls {
-    dns route53 {
-      max_retries 10
-    }
-  }
-  reverse_proxy localhost:${this.hostPort}
-}`
-  }
-
-  /** Ports to open in the EC2 security group. HTTP services use Caddy on 80/443 — no extra rules needed. */
-  get securityGroupPorts() {
-    return []
-  }
-
-  get unitName() { return `${this.name}.service` }
-  install() { return [`sudo tee /etc/systemd/system/${this.unitName} > /dev/null << 'EOF'\n${this.systemdUnitFile}\nEOF`] }
-  enable()  { return [`sudo systemctl enable ${this.name}`] }
-  start()   { return [`sudo systemctl start ${this.name}`] }
-}
-
-// ---------------------------------------------------------------------------
-// TCP/UDP service — bypasses Caddy, ports exposed directly on the host.
-// Used for game servers and any other raw socket services.
-// ---------------------------------------------------------------------------
-
-class TcpContainerService {
-  constructor({ name, image, ports, protocol = 'tcp' }) {
-    this.name = name
-    this.image = image
-    this.ports = ports
-    this.protocol = protocol // 'tcp' | 'udp' | 'both'
-  }
-
-  get systemdUnitFile() {
-    const portMappings = this.ports.map(p => `-p ${p}:${p}`).join(' \\\n  ')
-    return `
-[Unit]
-Description=Container service: ${this.name} (${this.protocol.toUpperCase()} ${this.ports.join(', ')})
-After=network.target docker.service
-Requires=docker.service
-
-[Service]
-EnvironmentFile=/etc/environment
-ExecStartPre=-/usr/bin/docker rm -f ${this.name}
-ExecStartPre=/usr/bin/docker pull ${this.image}
-ExecStart=/usr/bin/docker run --name ${this.name} \\
-  --network ossy-network \\
-  ${portMappings} \\
-  --env-file /etc/environment \\
-  ${this.image}
-ExecStop=/usr/bin/docker stop ${this.name}
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-`
-  }
-
-  /** TCP services bypass Caddy — no Caddy block. */
-  get caddyBlock() { return null }
-
-  /** Each port needs an explicit security group ingress rule. */
-  get securityGroupPorts() {
-    return this.ports.flatMap(port => {
-      if (this.protocol === 'both') return [{ port, protocol: 'tcp' }, { port, protocol: 'udp' }]
-      return [{ port, protocol: this.protocol }]
-    })
-  }
-
-  get unitName() { return `${this.name}.service` }
-  install() { return [`sudo tee /etc/systemd/system/${this.unitName} > /dev/null << 'EOF'\n${this.systemdUnitFile}\nEOF`] }
-  enable()  { return [`sudo systemctl enable ${this.name}`] }
-  start()   { return [`sudo systemctl start ${this.name}`] }
-}
-
-// ---------------------------------------------------------------------------
-// Factory
-// ---------------------------------------------------------------------------
-
-/**
- * Build service instances from the `services` array in platforms.json.
- * HTTP services auto-assign host ports starting at 3002 (counted separately
- * from TCP services so reordering TCP entries doesn't shift HTTP ports).
- *
- * @param {ContainerServiceConfig[]} services
- * @returns {(HttpContainerService|TcpContainerService)[]}
- */
-const fromConfig = (services = []) => {
-  let httpIndex = 0
-  return services.map(s => {
-    if (s.type === 'tcp') return new TcpContainerService(s)
-    return new HttpContainerService(s, httpIndex++)
-  })
-}
-
-module.exports = {
-  HttpContainerService,
-  TcpContainerService,
-  fromConfig
-}

package/src/infrastructure/container-deployment-target/index.js

@@ -1,3 +0,0 @@
-const { ContainerDeploymentTarget } = require('./container-deployment-target')
-
-module.exports = { ContainerDeploymentTarget }

package/src/infrastructure/container-deployment-target/ossy-api.service.js

@@ -1,54 +0,0 @@
-const systemdServiceFile = `
-[Unit]
-Description=Ossy API
-After=network.target docker.service
-Requires=docker.service
-
-[Service]
-EnvironmentFile=/etc/environment
-ExecStartPre=-/usr/bin/docker rm -f ossy-api
-ExecStartPre=/usr/bin/docker pull ghcr.io/ossy-se/api:latest
-ExecStart=/usr/bin/docker run --name ossy-api \\
-  --network ossy-network \\
-  -p 3001:3000 \\
-  -e DB_URL=\${DB_URL} \\
-  -e DB_NAME=\${DB_NAME} \\
-  -e TOKEN_SECRET=\${TOKEN_SECRET} \\
-  -e MEDIA_REPOSITORY=\${MEDIA_REPOSITORY} \\
-  -e MEDIA_CDN_DOMAIN_NAME=\${MEDIA_CDN_DOMAIN_NAME} \\
-  -e AWS_ACCESS_KEY_ID=\${AWS_ACCESS_KEY_ID} \\
-  -e AWS_SECRET_ACCESS_KEY=\${AWS_SECRET_ACCESS_KEY} \\
-  ghcr.io/ossy-se/api:latest
-ExecStop=/usr/bin/docker stop ossy-api
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-`
-
-// The image is pulled automatically on every start via ExecStartPre, so the
-// service always runs the latest published version. To redeploy: systemctl restart ossy-api
-
-/**
-  * @class
-*/
-class OssyApiService {
-
-  static install() {
-    return [`sudo tee /etc/systemd/system/ossy-api.service > /dev/null << 'EOF'\n${systemdServiceFile}\nEOF`]
-  }
-
-  static enable() {
-    return ['sudo systemctl enable ossy-api']
-  }
-
-  static start() {
-    return ['sudo systemctl start ossy-api']
-  }
-
-}
-
-module.exports = {
-  OssyApiService
-}

package/src/infrastructure/container-deployment-target/ossy-runtime.service.js

@@ -1,49 +0,0 @@
-const systemdServiceFile = `
-[Unit]
-Description=Ossy Runtime
-After=network.target docker.service
-Requires=docker.service
-
-[Service]
-EnvironmentFile=/etc/environment
-ExecStartPre=-/usr/bin/docker rm -f ossy-runtime
-ExecStartPre=/usr/bin/docker pull ghcr.io/ossy-se/platform:latest
-ExecStart=/usr/bin/docker run --name ossy-runtime \\
-  --network ossy-network \\
-  -p 3000:3000 \\
-  -e OSSY_API_KEY=\${OSSY_API_KEY} \\
-  -e OSSY_API_URL=http://ossy-api:3001/api/v0 \\
-  ghcr.io/ossy-se/platform:latest
-ExecStop=/usr/bin/docker stop ossy-runtime
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-`
-
-// The image is pulled automatically on every start via ExecStartPre, so the
-// service always runs the latest published version. To redeploy: systemctl restart ossy-runtime
-
-/**
-  * @class
-*/
-class OssyRuntimeService {
-
-  static install() {
-    return [`sudo tee /etc/systemd/system/ossy-runtime.service > /dev/null << 'EOF'\n${systemdServiceFile}\nEOF`]
-  }
-
-  static enable() {
-    return ['sudo systemctl enable ossy-runtime']
-  }
-
-  static start() {
-    return ['sudo systemctl start ossy-runtime']
-  }
-
-}
-
-module.exports = {
-  OssyRuntimeService
-}

package/src/infrastructure/container-deployment-target/user-data-commands.js

@@ -1,31 +0,0 @@
-const getInstallDocker = () => [
-  'apt-get remove docker docker-engine docker.io containerd runc',
-  `apt-get install \
-    apt-transport-https \
-    ca-certificates \
-    curl \
-    gnupg-agent \
-    software-properties-common -y`,
-  'curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -',
-  `sudo add-apt-repository \
-     "deb [arch=amd64] https://download.docker.com/linux/ubuntu \
-     $(lsb_release -cs) \
-     stable"`,
-  'sudo apt-get update',
-  'sudo apt-get install docker-ce docker-ce-cli containerd.io -y'
-]
-
-const getInstallNodeJs = () => [
-  'curl -fsSL https://deb.nodesource.com/setup_24.x | sudo -E bash -',
-  'sudo apt-get -y install nodejs'
-]
-
-const getInstallNpm = () => [
-  'sudo apt install npm'
-]
-
-module.exports = {
-  getInstallDocker,
-  getInstallNodeJs,
-  getInstallNpm
-}

package/src/infrastructure/deployment-target-stack.js

@@ -1,53 +0,0 @@
-/* eslint-disable no-new */
-const { CfnOutput, Stack } = require('aws-cdk-lib')
-const { ContainerDeploymentTarget } = require('./container-deployment-target')
-
-/**
- * DeploymentTargetStackProps
- * @typedef {Object} DeploymentTargetStackProps
- * @property {PlatformConfig} config - platform config
- * @property {import('aws-cdk-lib/aws-s3').IBucket} bucket - static assets bucket (from StorageStaticStack)
- * @property {string} cdnDomainName - CloudFront domain name (from StorageStaticStack)
- */
-
-/**
- * DeploymentTargetStack provisions the EC2 instance (with Elastic IP) that runs the
- * platform services. The S3 bucket lives in StorageStaticStack so that EC2 replacements
- * never trigger CloudFormation cross-stack export conflicts on storage resources.
- *
- * MEDIA_REPOSITORY and MEDIA_CDN_DOMAIN_NAME are derived from the actual bucket and CDN
- * resources rather than being hardcoded in platforms.json.
- */
-class DeploymentTargetStack extends Stack {
-  constructor(scope, id, props) {
-    super(scope, id, props)
-
-    if (!props?.config) {
-      throw ('[DeploymentTargetStack] No config provided')
-    }
-
-    const containerDeploymentTarget = new ContainerDeploymentTarget(this, 'ContainerDeploymentTarget', {
-      config: {
-        ...props.config,
-        env: {
-          ...props.config.env,
-          MEDIA_REPOSITORY: props.bucket.bucketName,
-          MEDIA_CDN_DOMAIN_NAME: `https://${props.cdnDomainName}`
-        }
-      },
-      bucket: props.bucket
-    })
-
-    this.containerDeploymentTargetPublicIp = containerDeploymentTarget.instancePublicIp
-
-    new CfnOutput(this, 'ContainerDeploymentTargetPublicIp', {
-      value: containerDeploymentTarget.instancePublicIp,
-      description: 'Public IP of the EC2 instance (Elastic IP)',
-      exportName: `${props.config.platformName}-ContainerDeploymentTargetPublicIp`
-    })
-  }
-}
-
-module.exports = {
-  DeploymentTargetStack
-}