@polymorphism-tech/morph-spec 4.3.4 → 4.3.5

package/.morph/templates/infrastructure/azure/storage.bicep

@@ -0,0 +1,106 @@
+// ==============================================================================
+// MORPH-SPEC - Storage Account
+// Azure Storage Account with Blob containers
+// ==============================================================================
+
+@description('Storage account name (lowercase, no hyphens, 3-24 chars)')
+@minLength(3)
+@maxLength(24)
+param name string
+
+@description('Location')
+param location string
+
+@description('Tags')
+param tags object = {}
+
+@description('SKU (Standard_LRS, Standard_GRS, Standard_ZRS)')
+@allowed(['Standard_LRS', 'Standard_GRS', 'Standard_ZRS', 'Premium_LRS'])
+param sku string = 'Standard_LRS'
+
+@description('Create default blob containers')
+param createContainers bool = true
+
+// ==============================================================================
+// STORAGE ACCOUNT
+// ==============================================================================
+
+resource storageAccount 'Microsoft.Storage/storageAccounts@2023-01-01' = {
+  name: name
+  location: location
+  tags: tags
+  kind: 'StorageV2'
+  sku: {
+    name: sku
+  }
+  properties: {
+    accessTier: 'Hot'
+    allowBlobPublicAccess: false
+    allowSharedKeyAccess: true
+    minimumTlsVersion: 'TLS1_2'
+    supportsHttpsTrafficOnly: true
+    networkAcls: {
+      defaultAction: 'Allow'
+      bypass: 'AzureServices'
+    }
+  }
+}
+
+// ==============================================================================
+// BLOB SERVICE
+// ==============================================================================
+
+resource blobService 'Microsoft.Storage/storageAccounts/blobServices@2023-01-01' = {
+  parent: storageAccount
+  name: 'default'
+  properties: {
+    deleteRetentionPolicy: {
+      enabled: true
+      days: 7
+    }
+  }
+}
+
+// ==============================================================================
+// DEFAULT CONTAINERS
+// ==============================================================================
+
+resource uploadsContainer 'Microsoft.Storage/storageAccounts/blobServices/containers@2023-01-01' = if (createContainers) {
+  parent: blobService
+  name: 'uploads'
+  properties: {
+    publicAccess: 'None'
+  }
+}
+
+resource reportsContainer 'Microsoft.Storage/storageAccounts/blobServices/containers@2023-01-01' = if (createContainers) {
+  parent: blobService
+  name: 'reports'
+  properties: {
+    publicAccess: 'None'
+  }
+}
+
+resource backupsContainer 'Microsoft.Storage/storageAccounts/blobServices/containers@2023-01-01' = if (createContainers) {
+  parent: blobService
+  name: 'backups'
+  properties: {
+    publicAccess: 'None'
+  }
+}
+
+// ==============================================================================
+// OUTPUTS
+// ==============================================================================
+
+@description('Storage Account ID')
+output id string = storageAccount.id
+
+@description('Storage Account name')
+output name string = storageAccount.name
+
+@description('Primary blob endpoint')
+output primaryBlobEndpoint string = storageAccount.properties.primaryEndpoints.blob
+
+@description('Connection string')
+output connectionString string = 'DefaultEndpointsProtocol=https;AccountName=${storageAccount.name};AccountKey=${storageAccount.listKeys().keys[0].value};EndpointSuffix=core.windows.net'

package/.morph/templates/infrastructure/docker/Dockerfile.template

@@ -0,0 +1,58 @@
+# Multi-stage Dockerfile for Next.js Production Build
+# Optimized for Next.js 15 with App Router
+
+FROM node:20-alpine AS base
+
+# Install dependencies only when needed
+FROM base AS deps
+RUN apk add --no-cache libc6-compat
+WORKDIR /app
+
+# Copy package files
+COPY package.json package-lock.json* ./
+RUN npm ci
+
+# Rebuild the source code only when needed
+FROM base AS builder
+WORKDIR /app
+COPY --from=deps /app/node_modules ./node_modules
+COPY . .
+
+# Set build-time environment variables
+ENV NEXT_TELEMETRY_DISABLED 1
+
+# Build Next.js application
+RUN npm run build
+
+# Production image, copy all the files and run next
+FROM base AS runner
+WORKDIR /app
+
+ENV NODE_ENV production
+ENV NEXT_TELEMETRY_DISABLED 1
+
+# Create nextjs user
+RUN addgroup --system --gid 1001 nodejs
+RUN adduser --system --uid 1001 nextjs
+
+# Copy built application
+COPY --from=builder /app/public ./public
+
+# Set the correct permission for prerender cache
+RUN mkdir .next
+RUN chown nextjs:nodejs .next
+
+# Automatically leverage output traces to reduce image size
+# https://nextjs.org/docs/advanced-features/output-file-tracing
+COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
+
+USER nextjs
+
+EXPOSE 3000
+
+ENV PORT 3000
+ENV HOSTNAME "0.0.0.0"
+
+# Run Next.js server
+CMD ["node", "server.js"]

package/.morph/templates/infrastructure/docker/docker-compose.template.yml

@@ -0,0 +1,67 @@
+# Docker Compose for Local Development
+# Next.js + Supabase Stack
+
+version: '3.8'
+
+services:
+  # Next.js Application
+  app:
+    build:
+      context: .
+      dockerfile: Dockerfile.dev
+    container_name: {{kebabCase FEATURE_NAME}}-app
+    ports:
+      - "3000:3000"
+    environment:
+      - NODE_ENV=development
+      - NEXT_PUBLIC_SUPABASE_URL=${NEXT_PUBLIC_SUPABASE_URL}
+      - NEXT_PUBLIC_SUPABASE_ANON_KEY=${NEXT_PUBLIC_SUPABASE_ANON_KEY}
+      - SUPABASE_SERVICE_ROLE_KEY=${SUPABASE_SERVICE_ROLE_KEY}
+    volumes:
+      - .:/app
+      - /app/node_modules
+      - /app/.next
+    depends_on:
+      - postgres
+    networks:
+      - app-network
+
+  # PostgreSQL Database (Local Supabase alternative)
+  postgres:
+    image: postgres:15-alpine
+    container_name: {{kebabCase FEATURE_NAME}}-postgres
+    restart: unless-stopped
+    ports:
+      - "5432:5432"
+    environment:
+      POSTGRES_USER: postgres
+      POSTGRES_PASSWORD: postgres
+      POSTGRES_DB: {{snakeCase FEATURE_NAME}}
+    volumes:
+      - postgres-data:/var/lib/postgresql/data
+      - ./supabase/migrations:/docker-entrypoint-initdb.d
+    networks:
+      - app-network
+
+  # Supabase Studio (Database UI - optional)
+  studio:
+    image: supabase/studio:latest
+    container_name: {{kebabCase FEATURE_NAME}}-studio
+    restart: unless-stopped
+    ports:
+      - "3001:3000"
+    environment:
+      SUPABASE_URL: http://kong:8000
+      STUDIO_PG_META_URL: http://meta:8080
+      SUPABASE_ANON_KEY: ${SUPABASE_ANON_KEY}
+      SUPABASE_SERVICE_KEY: ${SUPABASE_SERVICE_ROLE_KEY}
+    networks:
+      - app-network
+
+volumes:
+  postgres-data:
+    driver: local
+
+networks:
+  app-network:
+    driver: bridge

package/.morph/templates/infrastructure/docker/dockerfile-api.dockerfile

@@ -0,0 +1,38 @@
+# ============================================================
+# Dockerfile: .NET 10 API ({{titleCase FEATURE_NAME}})
+# Stack: Next.js + Supabase + .NET API
+# Generated by MORPH Framework
+# ============================================================
+
+# Stage 1: Build
+FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build
+WORKDIR /src
+
+# Copy project file and restore dependencies
+COPY *.csproj .
+RUN dotnet restore
+
+# Copy source code and publish
+COPY . .
+RUN dotnet publish -c Release -o /app/publish --no-restore
+
+# Stage 2: Runtime
+FROM mcr.microsoft.com/dotnet/aspnet:10.0 AS runtime
+WORKDIR /app
+
+# Copy published output
+COPY --from=build /app/publish .
+
+# Configuration
+ENV ASPNETCORE_URLS=http://+:8080
+ENV ASPNETCORE_ENVIRONMENT=Production
+
+# Expose port
+EXPOSE 8080
+
+# Health check
+HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
+  CMD curl -f http://localhost:8080/health || exit 1
+
+# Entrypoint
+ENTRYPOINT ["dotnet", "Api.dll"]

package/.morph/templates/infrastructure/docker/dockerfile-web.dockerfile

@@ -0,0 +1,48 @@
+# ============================================================
+# Dockerfile: Next.js Frontend ({{titleCase FEATURE_NAME}})
+# Stack: Next.js + Supabase
+# Generated by MORPH Framework
+# Requires: output: "standalone" in next.config.ts
+# ============================================================
+
+# Stage 1: Install dependencies
+FROM node:22-alpine AS deps
+WORKDIR /app
+COPY package.json package-lock.json ./
+RUN npm ci --omit=dev
+
+# Stage 2: Build application
+FROM node:22-alpine AS builder
+WORKDIR /app
+COPY --from=deps /app/node_modules ./node_modules
+COPY . .
+ENV NEXT_TELEMETRY_DISABLED=1
+RUN npm run build
+
+# Stage 3: Production runtime
+FROM node:22-alpine AS runner
+WORKDIR /app
+
+ENV NODE_ENV=production
+ENV NEXT_TELEMETRY_DISABLED=1
+
+# Create non-root user
+RUN addgroup --system --gid 1001 nodejs && \
+    adduser --system --uid 1001 nextjs
+
+# Copy build output
+COPY --from=builder /app/public ./public
+COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
+
+# Switch to non-root user
+USER nextjs
+
+# Expose port
+EXPOSE 3000
+
+ENV PORT=3000
+ENV HOSTNAME="0.0.0.0"
+
+# Start server
+CMD ["node", "server.js"]

package/.morph/templates/infrastructure/docker/easypanel.template.json

@@ -0,0 +1,54 @@
+{
+  "name": "{{kebabCase FEATURE_NAME}}",
+  "services": [
+    {
+      "type": "app",
+      "data": {
+        "projectName": "{{kebabCase FEATURE_NAME}}",
+        "serviceName": "{{kebabCase FEATURE_NAME}}-app",
+        "source": {
+          "type": "github",
+          "owner": "{{GITHUB_OWNER}}",
+          "repo": "{{GITHUB_REPO}}",
+          "ref": "main",
+          "autoDeploy": true
+        },
+        "build": {
+          "type": "dockerfile",
+          "dockerfile": "Dockerfile"
+        },
+        "deploy": {
+          "replicas": 1,
+          "command": null,
+          "zeroDowntime": true
+        },
+        "env": [
+          {
+            "key": "NODE_ENV",
+            "value": "production"
+          },
+          {
+            "key": "NEXT_PUBLIC_SUPABASE_URL",
+            "value": "${NEXT_PUBLIC_SUPABASE_URL}"
+          },
+          {
+            "key": "NEXT_PUBLIC_SUPABASE_ANON_KEY",
+            "value": "${NEXT_PUBLIC_SUPABASE_ANON_KEY}"
+          },
+          {
+            "key": "SUPABASE_SERVICE_ROLE_KEY",
+            "value": "${SUPABASE_SERVICE_ROLE_KEY}"
+          }
+        ],
+        "domains": [
+          {
+            "host": "{{kebabCase FEATURE_NAME}}.easypanel.host",
+            "port": 3000,
+            "https": true
+          }
+        ],
+        "mounts": []
+      }
+    }
+  ]
+}