@postxl/generators 0.2.2

package/dist/devops/generators/backend-build-sh.generator.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateBackendBuildSh = generateBackendBuildSh;
+function generateBackendBuildSh({ devOps: { database }, schema: { projectType, slug }, }) {
+    const useDb = !!database;
+    return projectType.kind === 'workspace'
+        ? buildShWorkspace({ useDb, projectDirectory: projectType.projectDirectory, slug })
+        : buildShStandalone({ useDb, slug });
+}
+const buildShWorkspace = ({ useDb, projectDirectory, slug, }) => {
+    const name = slug.replaceAll('-', '_');
+    return /*sh*/ String.raw `#!/bin/bash
+
+rm -rf out/
+npm i -g turbo@^2
+turbo prune @postxl/${slug} @postxl/${slug}-api --docker
+
+cp tsconfig.json tsconfig.base.json tsconfig.build.json ./out/full/
+${useDb ? `cp projects/${projectDirectory}/docker/backend/migrate.sh ./out/full/projects/${projectDirectory}/backend/` : ''}
+
+rm -rf ./out/full/projects/${projectDirectory}/frontend/
+rm -rf ./out/full/projects/${projectDirectory}/e2e/
+
+docker build -f projects/${projectDirectory}/docker/backend/Dockerfile \
+  --secret id=TURBO_TOKEN,env=TURBO_TOKEN \
+  -t ${name}_backend:latest ./out 
+`;
+};
+const buildShStandalone = ({ useDb, slug }) => {
+    const name = slug.replaceAll('-', '_');
+    return /*sh*/ String.raw `#!/bin/bash
+
+rm -rf out/
+npm i -g turbo@^2
+turbo prune @postxl/${slug}-api --docker
+
+cp tsconfig.json prisma.config.ts ./out/full/
+cp docker/backend/start.api.sh${useDb ? ' docker/backend/migrate.sh' : ''} ./out/full/backend/
+cp -r migrations ./out/full/
+
+rm -rf ./out/full/frontend/
+rm -rf ./out/full/e2e/
+
+docker build -f docker/backend/Dockerfile \
+  --secret id=TURBO_TOKEN,env=TURBO_TOKEN \
+  -t ${name}_backend:latest ./out
+`;
+};
+//# sourceMappingURL=backend-build-sh.generator.js.map

package/dist/devops/generators/backend-build-sh.generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-build-sh.generator.js","sourceRoot":"","sources":["../../../src/devops/generators/backend-build-sh.generator.ts"],"names":[],"mappings":";;AAEA,wDAQC;AARD,SAAgB,sBAAsB,CAAC,EACrC,MAAM,EAAE,EAAE,QAAQ,EAAE,EACpB,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,GACT;IACpB,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAA;IACxB,OAAO,WAAW,CAAC,IAAI,KAAK,WAAW;QACrC,CAAC,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC;QACnF,CAAC,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AACxC,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,EACxB,KAAK,EACL,gBAAgB,EAChB,IAAI,GAKL,EAAE,EAAE;IACH,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACtC,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA;;;;sBAIJ,IAAI,YAAY,IAAI;;;EAGxC,KAAK,CAAC,CAAC,CAAC,eAAe,gBAAgB,kDAAkD,gBAAgB,WAAW,CAAC,CAAC,CAAC,EAAE;;6BAE9F,gBAAgB;6BAChB,gBAAgB;;2BAElB,gBAAgB;;OAEpC,IAAI;CACV,CAAA;AACD,CAAC,CAAA;AAED,MAAM,iBAAiB,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAoC,EAAE,EAAE;IAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACtC,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA;;;;sBAIJ,IAAI;;;gCAGM,KAAK,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,EAAE;;;;;;;;OAQlE,IAAI;CACV,CAAA;AACD,CAAC,CAAA"}

package/dist/devops/generators/backend-dockerfile.generator.d.ts

@@ -0,0 +1,2 @@
+import { DevOpsContextResult } from '../devops.generator';
+export declare function generateBackendDockerfile({ devOps: { database }, schema: { projectType, slug }, }: DevOpsContextResult): string;

package/dist/devops/generators/backend-dockerfile.generator.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateBackendDockerfile = generateBackendDockerfile;
+function generateBackendDockerfile({ devOps: { database }, schema: { projectType, slug }, }) {
+    const useDb = !!database;
+    const isWorkspace = projectType.kind === 'workspace';
+    const directory = isWorkspace ? `projects/${projectType.projectDirectory}/` : '';
+    return generateDockerfile({ useDb, slug, directory, isWorkspace });
+}
+const generateDockerfile = ({ useDb, slug, directory, isWorkspace, }) => {
+    const migrateScriptPath = useDb ? `full/${directory}docker/backend/migrate.sh ` : '';
+    const copyCommand = isWorkspace ? `COPY full/${directory}docker/backend/start.api.sh ${migrateScriptPath}./\n` : '';
+    const chmodCommand = `RUN chmod +x ./start.api.sh${useDb ? ' ./migrate.sh' : ''}`;
+    return /*Dockerfile*/ `FROM node:24-alpine AS alpine
+# Check https://github.com/nodejs/docker-node/tree/b4117f9333da4138b03a546ec926ef50a31506c3#nodealpine to understand why libc6-compat might be needed.
+RUN apk update && apk add --no-cache libc6-compat
+
+# Setup pnpm on the alpine base
+FROM alpine AS base
+RUN npm i -g --ignore-scripts pnpm${isWorkspace ? '' : ' turbo@^2'}
+
+# Add lockfile and package.json's of isolated subworkspace
+FROM base AS installer
+WORKDIR /app
+
+# First install the dependencies (as they change less often)
+COPY json/ .
+RUN pnpm i --frozen-lockfile --ignore-scripts
+
+WORKDIR /app
+
+# Set Turborepo environment variables
+ENV TURBO_API=https://turborepo-cache.postxl.com
+ENV TURBO_TEAM=postxl
+ARG TURBO_TOKEN
+ENV TURBO_TOKEN=\${TURBO_TOKEN}
+
+# Build the project
+COPY full/ .
+RUN pnpm ${isWorkspace ? `turbo:ci build --filter=@postxl/${slug} --filter=@postxl/${slug}-api` : `turbo run build --filter=@postxl/${slug}-api`}
+
+WORKDIR /app/${directory}backend
+${useDb ? '# We separately add the migration script so that is can be called directly during the Migration stage.' : ''}
+${copyCommand}${chmodCommand}
+
+FROM base AS runner
+WORKDIR /app
+
+# Create non-root user and group
+RUN addgroup --system --gid 1001 nestjs && adduser --system --uid 1001 nestjs
+
+# Copy files as root (default)
+COPY --from=installer /app/ .
+# Set ownership for all files to nestjs
+# Restrict permissions only for backend app code, keep dependencies writable
+RUN chown -R nestjs:nestjs /app \\
+	&& find /app/${directory}backend -type d -exec chmod 755 {} + \\
+	&& find /app/${directory}backend -type f -exec chmod 444 {} +
+
+# Switch to non-root user
+USER nestjs
+
+WORKDIR /app/${directory.slice(0, -1)}
+CMD ["/bin/sh", "./backend/start.api.sh"]
+`;
+};
+//# sourceMappingURL=backend-dockerfile.generator.js.map

package/dist/devops/generators/backend-dockerfile.generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-dockerfile.generator.js","sourceRoot":"","sources":["../../../src/devops/generators/backend-dockerfile.generator.ts"],"names":[],"mappings":";;AAEA,8DASC;AATD,SAAgB,yBAAyB,CAAC,EACxC,MAAM,EAAE,EAAE,QAAQ,EAAE,EACpB,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,GACT;IACpB,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAA;IACxB,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,KAAK,WAAW,CAAA;IACpD,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,YAAY,WAAW,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IAEhF,OAAO,kBAAkB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAA;AACpE,CAAC;AAED,MAAM,kBAAkB,GAAG,CAAC,EAC1B,KAAK,EACL,IAAI,EACJ,SAAS,EACT,WAAW,GAMZ,EAAE,EAAE;IACH,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,SAAS,4BAA4B,CAAC,CAAC,CAAC,EAAE,CAAA;IACpF,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,aAAa,SAAS,+BAA+B,iBAAiB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;IACnH,MAAM,YAAY,GAAG,8BAA8B,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;IACjF,OAAO,cAAc,CAAC;;;;;;oCAMY,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW;;;;;;;;;;;;;;;;;;;;WAoBvD,WAAW,CAAC,CAAC,CAAC,mCAAmC,IAAI,qBAAqB,IAAI,MAAM,CAAC,CAAC,CAAC,oCAAoC,IAAI,MAAM;;eAEjI,SAAS;EACtB,KAAK,CAAC,CAAC,CAAC,wGAAwG,CAAC,CAAC,CAAC,EAAE;EACrH,WAAW,GAAG,YAAY;;;;;;;;;;;;;gBAaZ,SAAS;gBACT,SAAS;;;;;eAKV,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;;CAEpC,CAAA;AACD,CAAC,CAAA"}

package/dist/devops/generators/backend-start-api-sh.generator.d.ts

@@ -0,0 +1,2 @@
+import { DevOpsContextResult } from '../devops.generator';
+export declare function generateBackendStartApiSh({ devOps: { database }, schema: { projectType }, }: DevOpsContextResult): string;

package/dist/devops/generators/backend-start-api-sh.generator.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateBackendStartApiSh = generateBackendStartApiSh;
+function generateBackendStartApiSh({ devOps: { database }, schema: { projectType }, }) {
+    const useDb = !!database;
+    const directory = projectType.kind === 'workspace' ? `projects/${projectType.projectDirectory}/` : '';
+    return generateStartApiSh({ useDb, directory });
+}
+const generateStartApiSh = ({ useDb, directory }) => {
+    return /*sh*/ `#!/bin/sh
+/bin/pwd
+
+cd /app/${directory.slice(0, -1)}
+${useDb ? `\npnpm prisma migrate deploy\n` : ''}cd /app/${directory}backend
+pnpm run start
+`;
+};
+//# sourceMappingURL=backend-start-api-sh.generator.js.map

package/dist/devops/generators/backend-start-api-sh.generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-start-api-sh.generator.js","sourceRoot":"","sources":["../../../src/devops/generators/backend-start-api-sh.generator.ts"],"names":[],"mappings":";;AAEA,8DAQC;AARD,SAAgB,yBAAyB,CAAC,EACxC,MAAM,EAAE,EAAE,QAAQ,EAAE,EACpB,MAAM,EAAE,EAAE,WAAW,EAAE,GACH;IACpB,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAA;IACxB,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,YAAY,WAAW,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IAErG,OAAO,kBAAkB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;AACjD,CAAC;AAED,MAAM,kBAAkB,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,EAAyC,EAAE,EAAE;IACzF,OAAO,MAAM,CAAC;;;UAGN,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;EAC9B,KAAK,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,EAAE,WAAW,SAAS;;CAElE,CAAA;AACD,CAAC,CAAA"}

package/dist/devops/generators/bitbucket-pipelines-yml.generator.d.ts

@@ -0,0 +1,2 @@
+import { DevOpsContextResult } from '../devops.generator';
+export declare function generateBitbucketPipelinesYml({ schema: { slug }, devOps: { database, keycloak }, }: DevOpsContextResult): string;

package/dist/devops/generators/bitbucket-pipelines-yml.generator.js

@@ -0,0 +1,105 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateBitbucketPipelinesYml = generateBitbucketPipelinesYml;
+function generateBitbucketPipelinesYml({ schema: { slug }, devOps: { database, keycloak }, }) {
+    return /*yml*/ `
+image: node:20
+options:
+  docker: true
+
+clone:
+  depth: full
+
+definitions:
+  caches:
+    pnpm: ~/.pnpm-store
+    sonar: ~/.sonar/cache
+  services:
+    docker:
+      memory: 3072
+  steps:
+    - step: &build-test
+        name: Build and test
+        caches:
+          - pnpm
+          - sonar
+        services:
+          - docker
+        size: 4x
+        script:
+          - export ENABLE_BACKEND_SHUTDOWN=true
+          - export PLAYWRIGHT_WORKERS=1
+          ${database ? startPostgres : ''}
+          - npm install -g pnpm
+          - pnpm run setup
+          - pnpm prisma migrate dev --skip-generate
+          - pnpm run --dir backend/ e2e:coverage &
+          # Wait for backend to be healthy
+          - retries=0
+          - until curl --silent --fail http://localhost:3001/health || [ $((retries++)) -ge 10 ]; do sleep $((10 * retries)); done
+
+          - pnpm run --dir frontend/ e2e:ci &
+          # Wait for frontend to be healthy
+          - retries=0
+          - until curl --silent --fail http://localhost:3000/health || [ $((retries++)) -ge 10 ]; do sleep $((10 * retries)); done
+
+          - pnpm run --dir backend/ test:jest
+
+          - (cd e2e && npx playwright install --with-deps && npx playwright test)
+        artifacts:
+          - 'e2e/test-results/**'
+          - 'backend/coverage/**'
+    - step: &run-sonar-scan-sonarcloud
+        name: Run Sonar Scan on SonarCloud
+        size: 4x
+        script:
+          - pipe: sonarsource/sonarcloud-scan:2.0.0
+    - step: &check-quality-gate-sonarcloud
+        name: Check the Quality Gate on SonarCloud
+        size: 4x
+        script:
+          - pipe: sonarsource/sonarcloud-quality-gate:0.1.6
+    - step: &lint-dockerfile
+        name: Lint the Dockerfile
+        image: hadolint/hadolint:latest-debian
+        script:
+          ${keycloak ? '- hadolint docker/keycloak/Dockerfile' : ''}
+          - hadolint docker/backend/Dockerfile
+          - hadolint docker/frontend/Dockerfile
+    - step: &build-images
+        name: Build the application
+        caches:
+          - pnpm
+          - docker
+        size: 2x
+        script:
+          # Build the Docker image (to do asset and template compilation, etc.)
+          ${keycloak ? `- docker build -t ${slug}-keycloak:latest -f ./docker/Keycloak/Dockerfile .` : ''}
+          - docker build -t ${slug}-backend:latest -f ./docker/backend/Dockerfile .
+          - docker build -t ${slug}-frontend:latest -f ./docker/frontend/Dockerfile .
+
+pipelines:
+  pull-requests:
+    '**':
+      - parallel:
+          - step: *lint-dockerfile
+          - step: *build-test
+      - step: *run-sonar-scan-sonarcloud
+      - step: *check-quality-gate-sonarcloud
+  branches:
+    main:
+      - parallel:
+          - step: *lint-dockerfile
+          - step: *build-test
+      - step: *run-sonar-scan-sonarcloud
+      - step: *check-quality-gate-sonarcloud
+      - step: *build-images
+`;
+}
+const startPostgres = `
+          # Start Postgres
+          - docker run --name postgres -e POSTGRES_USER=$POSTGRES_USER -e POSTGRES_PASSWORD=$POSTGRES_PASSWORD -e POSTGRES_DB=$POSTGRES_DB -p 5432:5432 -d postgres:13
+          # Wait for Postgres to be ready
+          - until docker exec postgres pg_isready -U $POSTGRES_USER || [ $((retries++)) -ge 10 ]; do sleep $((10 * retries)); done
+`;
+//# sourceMappingURL=bitbucket-pipelines-yml.generator.js.map

package/dist/devops/generators/bitbucket-pipelines-yml.generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bitbucket-pipelines-yml.generator.js","sourceRoot":"","sources":["../../../src/devops/generators/bitbucket-pipelines-yml.generator.ts"],"names":[],"mappings":";;AAEA,sEAiGC;AAjGD,SAAgB,6BAA6B,CAAC,EAC5C,MAAM,EAAE,EAAE,IAAI,EAAE,EAChB,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,GACV;IACpB,OAAO,OAAO,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;YA2BL,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAkC7B,QAAQ,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;YAWvD,QAAQ,CAAC,CAAC,CAAC,qBAAqB,IAAI,oDAAoD,CAAC,CAAC,CAAC,EAAE;8BAC3E,IAAI;8BACJ,IAAI;;;;;;;;;;;;;;;;;;CAkBjC,CAAA;AACD,CAAC;AAED,MAAM,aAAa,GAAG;;;;;CAKrB,CAAA"}

package/dist/devops/generators/configure-keycloak-sh.generator.d.ts

@@ -0,0 +1,2 @@
+import { DevOpsContext } from '../devops.generator';
+export declare function generateConfigureKeycloakSh({ keycloak }: DevOpsContext): string;

package/dist/devops/generators/configure-keycloak-sh.generator.js

@@ -0,0 +1,158 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateConfigureKeycloakSh = generateConfigureKeycloakSh;
+function generateConfigureKeycloakSh({ keycloak }) {
+    if (!keycloak) {
+        return '';
+    }
+    return /*sh*/ `#!/bin/bash
+
+set -e
+
+${keycloak.components.includes('customScripts') ? customScripts : ''}
+
+# Start Keycloak in the background to configure it
+/opt/keycloak/bin/kc.sh start-dev &
+
+# Wait for Keycloak to start by checking its log output
+echo "Waiting for Keycloak to start..."
+until /opt/keycloak/bin/kcadm.sh config credentials --server http://localhost:8080 --realm master --user $KEYCLOAK_ADMIN --password $KEYCLOAK_ADMIN_PASSWORD; do
+  echo "Not ready yet, will try again in 5 seconds..."
+  sleep 5
+done
+echo "Keycloak is ready!"
+
+## retrieve realm
+realm_info=$(/opt/keycloak/bin/kcadm.sh get realms/$KEYCLOAK_REALM --fields=id 2>/dev/null || echo "not found")
+
+## Check if realm_info is not empty
+if [[ "$realm_info" == "not found" ]]; then
+  # Configure the admin user and import the realm
+  /opt/keycloak/bin/kcadm.sh config credentials --server http://localhost:8080 --realm master --user $KEYCLOAK_ADMIN --password $KEYCLOAK_ADMIN_PASSWORD
+  /opt/keycloak/bin/kcadm.sh create realms -s realm=$KEYCLOAK_REALM \\
+    -s 'attributes.frontendUrl='$KEYCLOAK_URL \\
+    -s enabled=true
+
+  ${keycloak.components.includes('toc') ? toc : ''}
+
+  # create a new development user
+  /opt/keycloak/bin/kcadm.sh create users -r $KEYCLOAK_REALM \\
+    -s username=$DEV_USERNAME \\
+    -s firstName="Developer" \\
+    -s lastName="Account" \\
+    -s email="dev@postxl.com" \\
+    -s emailVerified=true \\
+    -s 'credentials=[{"type":"password","value":"'$DEV_PASSWORD'"}]' \\
+    -s enabled=true
+
+  # Create a new client
+  INTERNAL_CLIENT_ID=$(/opt/keycloak/bin/kcadm.sh create clients -i -r $KEYCLOAK_REALM \\
+    -s clientId=$KEYCLOAK_CLIENT_ID \\
+    -s secret=$KEYCLOAK_CLIENT_SECRET \\
+    -s 'rootUrl='$KEYCLOAK_URL \\
+    -s 'adminUrl='$KEYCLOAK_URL \\
+    -s 'redirectUris=["'$KEYCLOAK_REDIRECT_URL'"]' \\
+    -s 'attributes={"post.logout.redirect.uris": "http://localhost:3000/*##http://localhost:3001/*"}' \\
+    -s 'webOrigins=["*"]' \\
+    -s publicClient=false \\
+    -s clientAuthenticatorType="client-secret" \\
+    -s enabled=true)
+
+  ${keycloak.components.includes('userAttributes') ? userAttributes : ''}
+
+  ${keycloak.components.includes('samlIdp') ? samlIdp : ''}
+
+  ${keycloak.components.includes('idpMapper') ? idpMappers : ''}
+else
+  echo "Realm '$KEYCLOAK_REALM' already exists!"
+fi
+
+# Shutdown Keycloak gracefully
+kill $(jobs -p)
+
+# Wait for shutdown
+wait
+
+# Start Keycloak dev server in the foreground
+exec /opt/keycloak/bin/kc.sh start-dev \\
+  --hostname-strict=false \\
+  --hostname-admin $KEYCLOAK_ADMIN_URL \\
+  --http-relative-path /auth/ 
+  # --proxy-headers xforwarded
+
+# # Start Keycloak in the foreground
+# exec /opt/keycloak/bin/kc.sh start --hostname-strict=false
+`;
+}
+const customScripts = `
+# We need to build the Keycloak server if we want to use custom scripts
+/opt/keycloak/bin/kc.sh build \\
+  --http-relative-path=/auth/
+  --features="scripts"
+`;
+const toc = `
+  # Enable terms and conditions and update localization
+  /opt/keycloak/bin/kcadm.sh update realms/usp/authentication/required-actions/TERMS_AND_CONDITIONS -r $KEYCLOAK_REALM -s enabled="true" -s defaultAction="true"
+  /opt/keycloak/bin/kcadm.sh create realms/$KEYCLOAK_REALM/localization/en -r $KEYCLOAK_REALM -f /opt/keycloak/config/localization.en.json
+`;
+const userAttributes = `
+  # Update user attributes
+  /opt/keycloak/bin/kcadm.sh update realms/$KEYCLOAK_REALM/users/profile -r $KEYCLOAK_REALM -f /opt/keycloak/config/user-attributes.json
+
+  # Creating protocol mappers
+  CLIENT_SCOPE_ID=$(/opt/keycloak/bin/kcadm.sh get client-scopes -r $KEYCLOAK_REALM --fields=id,name | grep -B 1 '"name" : "profile"' | grep '"id" :' | sed 's/.*"id" : "\\(.*\\)".*/\\1/')
+  /opt/keycloak/bin/kcadm.sh create client-scopes/$CLIENT_SCOPE_ID/protocol-mappers/add-models -r $KEYCLOAK_REALM -f /opt/keycloak/config/protocol-mappers.json
+`;
+const samlIdp = `
+  # Adding identity provider
+  /opt/keycloak/bin/kcadm.sh create identity-provider/instances -r $KEYCLOAK_REALM \\
+    -s alias=saml \\
+    -s displayName=Saml \\
+    -s providerId=saml \\
+    -s enabled=true \\
+    -s updateProfileFirstLoginMode=on \\
+    -s config.signingCertificate="$SAML_CERTIFICATE" \\
+    -s config.postBindingLogout=true \\
+    -s config.nameIDPolicyFormat=$SAML_NAME_POLICY_FORMAT \\
+    -s config.postBindingResponse=true \\
+    -s config.singleLogoutServiceUrl=$SAML_SINGLE_LOGOUT_URL \\
+    -s config.entityId=$SAML_ENTITY_ID \\
+    -s config.idpEntityId=$SAML_IDP_ENTITY_ID \\
+    -s config.allowCreate=true \\
+    -s config.wantAssertionsSigned=true \\
+    -s config.postBindingAuthnRequest=true \\
+    -s config.syncMode=LEGACY \\
+    -s config.singleSignOnServiceUrl=$SAML_SINGLE_SIGN_ON_URL \\
+    -s config.wantAuthnRequestsSigned=true
+`;
+const idpMappers = `
+  # Adding identity provider mappers
+  /opt/keycloak/bin/kcadm.sh create identity-provider/instances/saml/mappers -r $KEYCLOAK_REALM \\
+    -s name=groupmembership \\
+    -s identityProviderAlias=saml \\
+    -s identityProviderMapper=saml-user-attribute-idp-mapper \\
+    -s config.\\"user.attribute\\"=groups \\
+    -s config.\\"attribute.name\\"=groupmembership
+
+  /opt/keycloak/bin/kcadm.sh create identity-provider/instances/saml/mappers -r $KEYCLOAK_REALM \\
+    -s name=lastName \\
+    -s identityProviderAlias=saml \\
+    -s identityProviderMapper=saml-user-attribute-idp-mapper \\
+    -s config.\\"user.attribute\\"=lastName \\
+    -s config.\\"attribute.name\\"=lastName
+
+  /opt/keycloak/bin/kcadm.sh create identity-provider/instances/saml/mappers -r $KEYCLOAK_REALM \\
+    -s name=uuid \\
+    -s identityProviderAlias=saml \\
+    -s identityProviderMapper=saml-user-attribute-idp-mapper \\
+    -s config.\\"user.attribute\\"=uuid \\
+    -s config.\\"attribute.name\\"=uuid
+
+  /opt/keycloak/bin/kcadm.sh create identity-provider/instances/saml/mappers -r $KEYCLOAK_REALM \\
+    -s name=firstName \\
+    -s identityProviderAlias=saml \\
+    -s identityProviderMapper=saml-user-attribute-idp-mapper \\
+    -s config.\\"user.attribute\\"=firstName \\
+    -s config.\\"attribute.name\\"=firstName
+`;
+//# sourceMappingURL=configure-keycloak-sh.generator.js.map

package/dist/devops/generators/configure-keycloak-sh.generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configure-keycloak-sh.generator.js","sourceRoot":"","sources":["../../../src/devops/generators/configure-keycloak-sh.generator.ts"],"names":[],"mappings":";;AAEA,kEAkFC;AAlFD,SAAgB,2BAA2B,CAAC,EAAE,QAAQ,EAAiB;IACrE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,MAAM,CAAC;;;;EAId,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;;;;;;;;;;;;IAwBhE,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;IAyB9C,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE;;IAEpE,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;;IAEtD,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;;;;;;;;CAoB9D,CAAA;AACD,CAAC;AAED,MAAM,aAAa,GAAG;;;;;CAKrB,CAAA;AAED,MAAM,GAAG,GAAG;;;;CAIX,CAAA;AAED,MAAM,cAAc,GAAG;;;;;;;CAOtB,CAAA;AAED,MAAM,OAAO,GAAG;;;;;;;;;;;;;;;;;;;;;CAqBf,CAAA;AAED,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BlB,CAAA"}

package/dist/devops/generators/docker-compose-yml.generator.d.ts

@@ -0,0 +1,2 @@
+import { DevOpsContext } from '../devops.generator';
+export declare function generateDockerComposeYaml({ database, keycloak }: DevOpsContext): string;

package/dist/devops/generators/docker-compose-yml.generator.js

@@ -0,0 +1,78 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateDockerComposeYaml = generateDockerComposeYaml;
+function generateDockerComposeYaml({ database, keycloak }) {
+    return /*yml*/ `
+services:
+  ${database ? dbService(database) : ''}
+
+  ${keycloak ? keycloakService(keycloak) : ''}
+
+networks:
+  backend: {}
+
+${database ? volumes : ''}
+`;
+}
+const dbService = ({ username, password, database }) => `
+  db:
+    image: postgres:13
+    restart: always
+    ports:
+      - '5432:5432'
+    expose:
+      - '5432'
+    environment:
+      POSTGRES_USER: ${username}
+      POSTGRES_PASSWORD: ${password}
+      POSTGRES_DB: ${database}
+    command: ['postgres']
+    volumes:
+      - postgres:/var/lib/postgresql/data
+    networks:
+      - backend
+    healthcheck:
+      test: ['CMD-SHELL', 'pg_isready -U ${username} -d ${database}']
+      interval: 10s
+      timeout: 5s
+      retries: 5
+`;
+const keycloakService = ({ host, pathPrefix, clientId, clientSecret, realm }) => `
+  keycloak:
+    build:
+      context: ./
+      dockerfile: ./docker/keycloak/Dockerfile
+    ports:
+      - '8080:8080'
+      - '8443:8443'
+      - '9000:9000'
+    expose:
+      - '8080'
+      - '8443'
+      - '9000'
+    environment:
+      KEYCLOAK_URL: ${host}${pathPrefix}
+      KEYCLOAK_ADMIN_URL: ${host}${pathPrefix}
+      KEYCLOAK_ADMIN: admin
+      KEYCLOAK_ADMIN_PASSWORD: admin
+      KEYCLOAK_REALM: ${realm}
+      KEYCLOAK_CLIENT_ID: ${clientId}
+      KEYCLOAK_REDIRECT_URL: http://localhost:3001/auth/callback
+      KEYCLOAK_CLIENT_SECRET: ${clientSecret}
+      DEV_USERNAME: developer
+      DEV_PASSWORD: root
+      # KC_LOG_LEVEL: DEBUG
+    healthcheck:
+      test: ['CMD-SHELL', 'curl -f http://localhost:9000/auth/health || exit 1']
+      interval: 10s
+      timeout: 5s
+      retries: 10
+      start_period: 45s
+    networks:
+      - backend
+`;
+const volumes = `
+volumes:
+  postgres:
+`;
+//# sourceMappingURL=docker-compose-yml.generator.js.map

package/dist/devops/generators/docker-compose-yml.generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-compose-yml.generator.js","sourceRoot":"","sources":["../../../src/devops/generators/docker-compose-yml.generator.ts"],"names":[],"mappings":";;AAEA,8DAYC;AAZD,SAAgB,yBAAyB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAiB;IAC7E,OAAO,OAAO,CAAC;;IAEb,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;;IAEnC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;;;;;EAK3C,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;CACxB,CAAA;AACD,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAkB,EAAE,EAAE,CAAC;;;;;;;;;uBASjD,QAAQ;2BACJ,QAAQ;qBACd,QAAQ;;;;;;;2CAOc,QAAQ,OAAO,QAAQ;;;;CAIjE,CAAA;AAED,MAAM,eAAe,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAkB,EAAE,EAAE,CAAC;;;;;;;;;;;;;;sBAc3E,IAAI,GAAG,UAAU;4BACX,IAAI,GAAG,UAAU;;;wBAGrB,KAAK;4BACD,QAAQ;;gCAEJ,YAAY;;;;;;;;;;;;CAY3C,CAAA;AAED,MAAM,OAAO,GAAG;;;CAGf,CAAA"}

package/dist/devops/generators/e2e-yml.generator.d.ts

@@ -0,0 +1,2 @@
+import { DevOpsContextResult } from '../devops.generator';
+export declare function generateE2EYaml({ devOps: { database } }: DevOpsContextResult): string;