@postxl/generators 0.2.2

package/dist/devops/generators/e2e-yml.generator.js

@@ -0,0 +1,195 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateE2EYaml = generateE2EYaml;
+function generateE2EYaml({ devOps: { database } }) {
+    return /*yml*/ `
+  name: End-to-End Visual Tests
+
+  on:
+    push:
+      branches:
+        - main
+    pull_request:
+
+  concurrency:
+    group: \${{ github.workflow }}-\${{ github.ref }}
+    cancel-in-progress: true
+
+  jobs:
+    e2e:
+      name: Run e2e test
+      runs-on: ubuntu-latest
+      
+      container:
+        image: mcr.microsoft.com/playwright:v1.56.1
+
+      ${database ? postgresContainerSetup(database) : ''}
+
+      steps:
+        - name: Checkout Current branch
+          uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4.3.1
+          with:
+            ref: \${{ github.ref }}
+            fetch-depth: 0
+
+        - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda #v4.1.0
+
+        - name: Setup Node Environment
+          uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 #v4.4.0
+          with:
+            node-version-file: '.nvmrc'
+            cache: 'pnpm'
+
+        - name: Setup Workspace
+          run: pnpm run setup
+
+        ${database ? databaseSetup(database.connectionString) : ''}
+
+        - name: Start backend
+          run: pnpm e2e:coverage:stateless > backend.log 2>&1 &
+          working-directory: backend
+          ${database ? databaseConnectionEnv(database.connectionString) : ''}
+
+        - name: Start frontend
+          run: pnpm e2e:ci > frontend.log 2>&1 &
+          working-directory: frontend
+          env:
+            VITE_PUBLIC_API_URL: http://localhost:3001
+            VITE_PUBLIC_API_URL_2: http://localhost:3001
+            VITE_PUBLIC_BASE_URL: http://localhost:3000
+            VITE_PUBLIC_MAPBOX_ACCESS_TOKEN: \${{ secrets.MAPBOX_ACCESS_TOKEN }}
+
+        - name: Check if Backend and Frontend are running and Print Logs
+          run: |
+            sleep 30
+
+            echo "Backend Logs:"
+            cat backend/backend.log
+
+            echo "Frontend Logs:"
+            cat frontend/frontend.log
+
+        - name: Wait for Backend to be ready
+          run: |
+            retry=0
+            maxRetries=9
+            delay=10
+
+            url="http://localhost:3001/health"
+
+            until output=$(curl --fail $url 2>&1); do
+              retry=$((retry+1))
+
+              if [ $retry -eq $maxRetries ]; then
+                echo "$url not ready after $maxRetries attempts, failing..."
+                echo $output
+                exit 1
+              fi
+
+              echo "waiting for $url to be ready, attempt $retry..."
+              echo $output
+              sleep $((delay * retry))
+            done
+
+            echo "$url is ready!"
+
+        - name: Wait for Frontend to be ready
+          run: |
+            retry=0
+            maxRetries=9
+            delay=10
+
+            url="http://localhost:3000/health"
+
+            until output=$(curl --fail $url 2>&1); do
+              retry=$((retry+1))
+
+              if [ $retry -eq $maxRetries ]; then
+                echo "$url not ready after $maxRetries attempts, failing..."
+                echo $output
+                exit 1
+              fi
+
+              echo "waiting for $url to be ready, attempt $retry..."
+              echo $output
+              sleep $((delay * retry))
+            done
+
+            echo "$url is ready!"
+
+        - name: Run Backend Unit Tests
+          run: pnpm run test:jest
+          working-directory: backend
+
+        - name: Run Storybook Vitest Tests
+          run: pnpm test:storybook
+          working-directory: frontend
+
+        - name: Run Playwright visual Tests
+          run: npx playwright test
+          working-directory: e2e
+          env:
+            BASE_URL: 'http://localhost:3000'
+            API_URL: 'http://localhost:3001'
+            ENABLE_BACKEND_SHUTDOWN: true
+            PLAYWRIGHT_WORKERS: 2
+
+        - name: Upload Playwright Report
+          uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4.6.2
+          if: \${{ !cancelled() }}
+          with:
+            name: playwright-report
+            path: e2e/test-results
+            retention-days: 5
+
+        - name: Upload Backend Coverage
+          uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4.6.2
+          if: \${{ !cancelled() }}
+          with:
+            name: backend-coverage
+            path: backend/coverage
+            retention-days: 5
+
+        - name: Upload Frontend Coverage
+          uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4.6.2
+          if: \${{ !cancelled() }}
+          with:
+            name: frontend-coverage
+            path: frontend/coverage
+            retention-days: 5
+
+        - name: SonarQube Scan
+          uses: SonarSource/sonarqube-scan-action@1a6d90ebcb0e6a6b1d87e37ba693fe453195ae25 #v5.3.1
+          env:
+            GITHUB_TOKEN: \${{ secrets.GITHUB_TOKEN }}
+            SONAR_TOKEN: \${{ secrets.SONAR_TOKEN }}
+`;
+}
+const postgresContainerSetup = ({ username, password, database }) => `
+      services:
+        postgres:
+          image: postgres:13
+          env:
+            POSTGRES_USER: ${username}
+            POSTGRES_PASSWORD: ${password}
+            POSTGRES_DB: ${database}
+          ports:
+            - 5432:5432
+          # Add a health check
+          options: >-
+            --health-cmd pg_isready
+            --health-interval 10s
+            --health-timeout 5s
+            --health-retries 5
+`;
+const databaseConnectionEnv = (connectionString) => `
+          env:
+            # We need to use postgres service name as the host!
+            DATABASE_CONNECTION: '${connectionString}'
+`;
+const databaseSetup = (connectionString) => `
+        - name: Setup Test Database
+          run: pnpm prisma migrate dev
+${databaseConnectionEnv(connectionString)}
+`;
+//# sourceMappingURL=e2e-yml.generator.js.map

package/dist/devops/generators/e2e-yml.generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"e2e-yml.generator.js","sourceRoot":"","sources":["../../../src/devops/generators/e2e-yml.generator.ts"],"names":[],"mappings":";;AAEA,0CAmKC;AAnKD,SAAgB,eAAe,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAuB;IAC3E,OAAO,OAAO,CAAC;;;;;;;;;;;;;;;;;;;;;QAqBT,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;;;;;;;;UAoB9C,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE;;;;;YAKtD,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmH3E,CAAA;AACD,CAAC;AAED,MAAM,sBAAsB,GAAG,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAkB,EAAE,EAAE,CAAC;;;;;6BAKxD,QAAQ;iCACJ,QAAQ;2BACd,QAAQ;;;;;;;;;CASlC,CAAA;AAED,MAAM,qBAAqB,GAAG,CAAC,gBAAwB,EAAE,EAAE,CAAC;;;oCAGxB,gBAAgB;CACnD,CAAA;AAED,MAAM,aAAa,GAAG,CAAC,gBAAwB,EAAE,EAAE,CAAC;;;EAGlD,qBAAqB,CAAC,gBAAgB,CAAC;CACxC,CAAA"}

package/dist/devops/generators/frontend-build-sh.generator.d.ts

@@ -0,0 +1,2 @@
+import { DevOpsContextResult } from '../devops.generator';
+export declare function generateFrontendBuildSh({ schema: { projectType, slug } }: DevOpsContextResult): string;

package/dist/devops/generators/frontend-build-sh.generator.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateFrontendBuildSh = generateFrontendBuildSh;
+function generateFrontendBuildSh({ schema: { projectType, slug } }) {
+    return projectType.kind === 'workspace'
+        ? buildShWorkspace({ projectDirectory: projectType.projectDirectory, slug })
+        : buildShStandalone({ slug });
+}
+const buildShWorkspace = ({ projectDirectory, slug }) => {
+    const name = slug.replaceAll('-', '_');
+    return /*sh*/ `#!/bin/bash
+
+rm -rf out/
+npm i -g turbo@^2
+turbo prune @postxl/${slug} @postxl/${slug}-frontend @postxl/${slug}-api --docker
+
+cp tsconfig.json tsconfig.base.json tsconfig.build.json ./out/full/
+cp projects/${projectDirectory}/docker/frontend/entrypoint.sh ./out/full/projects/${projectDirectory}/frontend/
+
+rm -rf ./out/full/projects/${projectDirectory}/e2e/
+
+docker build -f projects/${projectDirectory}/docker/frontend/Dockerfile \\
+  --secret id=TURBO_TOKEN,env=TURBO_TOKEN \\
+  -t ${name}_frontend:latest ./out
+`;
+};
+const buildShStandalone = ({ slug }) => {
+    const name = slug.replaceAll('-', '_');
+    return /*sh*/ String.raw `#!/bin/bash
+
+rm -rf out/
+npm i -g turbo@^2
+turbo prune @postxl/${slug}-frontend @postxl/${slug}-api --docker
+
+cp tsconfig.json prisma.config.ts ./out/full/
+cp docker/frontend/entrypoint.sh docker/frontend/frontend.conf ./out/full/frontend/
+
+rm -rf ./out/full/e2e/
+
+docker build -f docker/frontend/Dockerfile \
+  --secret id=TURBO_TOKEN,env=TURBO_TOKEN \
+  -t ${name}_frontend:latest ./out
+`;
+};
+//# sourceMappingURL=frontend-build-sh.generator.js.map

package/dist/devops/generators/frontend-build-sh.generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontend-build-sh.generator.js","sourceRoot":"","sources":["../../../src/devops/generators/frontend-build-sh.generator.ts"],"names":[],"mappings":";;AAEA,0DAIC;AAJD,SAAgB,uBAAuB,CAAC,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAuB;IAC5F,OAAO,WAAW,CAAC,IAAI,KAAK,WAAW;QACrC,CAAC,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,EAAE,WAAW,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC;QAC5E,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;AACjC,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAA8C,EAAE,EAAE;IAClG,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACtC,OAAO,MAAM,CAAC;;;;sBAIM,IAAI,YAAY,IAAI,qBAAqB,IAAI;;;cAGrD,gBAAgB,sDAAsD,gBAAgB;;6BAEvE,gBAAgB;;2BAElB,gBAAgB;;OAEpC,IAAI;CACV,CAAA;AACD,CAAC,CAAA;AAED,MAAM,iBAAiB,GAAG,CAAC,EAAE,IAAI,EAAoB,EAAE,EAAE;IACvD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACtC,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA;;;;sBAIJ,IAAI,qBAAqB,IAAI;;;;;;;;;OAS5C,IAAI;CACV,CAAA;AACD,CAAC,CAAA"}

package/dist/devops/generators/frontend-dockerfile.generator.d.ts

@@ -0,0 +1,2 @@
+import { DevOpsContextResult } from '../devops.generator';
+export declare function generateFrontendDockerfile({ schema: { projectType, slug } }: DevOpsContextResult): string;

package/dist/devops/generators/frontend-dockerfile.generator.js

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateFrontendDockerfile = generateFrontendDockerfile;
+function generateFrontendDockerfile({ schema: { projectType, slug } }) {
+    const isWorkspace = projectType.kind === 'workspace';
+    const directory = isWorkspace ? `projects/${projectType.projectDirectory}/` : '';
+    return generateDockerfile({ directory, slug, isWorkspace });
+}
+const generateDockerfile = ({ directory, slug, isWorkspace, }) => /*Dockerfile*/ String.raw `# Step 1. Rebuild the source code only when needed
+FROM node:24 AS base
+RUN npm i -g --ignore-scripts pnpm${isWorkspace ? '' : ' turbo@^2'}
+
+FROM base AS installer
+WORKDIR /app
+
+# Install dependencies
+COPY json/ .
+RUN pnpm i --frozen-lockfile --ignore-scripts
+
+WORKDIR /app
+# Copy source files
+COPY full/ .
+
+# Set Turborepo environment variables
+ENV TURBO_API=https://turborepo-cache.postxl.com
+ENV TURBO_TEAM=postxl
+
+# Safely use Turborepo secret according to https://docs.docker.com/build/building/secrets/
+RUN --mount=type=secret,id=TURBO_TOKEN \
+  VITE_PUBLIC_API_URL=PLACEHOLDER_VITE_PUBLIC_API_URL VITE_PUBLIC_BASE_URL=PLACEHOLDER_VITE_PUBLIC_BASE_URL \
+  VITE_PUBLIC_MAPBOX_ACCESS_TOKEN=PLACEHOLDER_VITE_PUBLIC_MAPBOX_ACCESS_TOKEN VITE_PUBLIC_ENABLE_ANALYTICS=PLACEHOLDER_VITE_PUBLIC_ENABLE_ANALYTICS \
+  VITE_PUBLIC_ANALYTICS_SCRIPT_URL=PLACEHOLDER_VITE_PUBLIC_ANALYTICS_SCRIPT_URL VITE_PUBLIC_KEYCLOAK_URL=PLACEHOLDER_VITE_PUBLIC_KEYCLOAK_URL \
+  VITE_PUBLIC_KEYCLOAK_CLIENT_ID=PLACEHOLDER_VITE_PUBLIC_KEYCLOAK_CLIENT_ID VITE_PUBLIC_KEYCLOAK_REALM=PLACEHOLDER_VITE_PUBLIC_KEYCLOAK_REALM \
+  VITE_PUBLIC_CHECK_LOGIN_IFRAME=PLACEHOLDER_VITE_PUBLIC_CHECK_LOGIN_IFRAME \
+  pnpm ${isWorkspace ? `turbo:ci build --filter=@postxl/${slug} --filter=@postxl/${slug}-frontend --filter=@postxl/${slug}-api` : `turbo run build --filter=@postxl/${slug}-frontend --filter=@postxl/${slug}-api`}
+
+# Step 2. Production image, copy all the files and run nginx
+FROM node:24-alpine AS runner
+
+RUN apk add --no-cache nginx=~1.28
+
+WORKDIR /app
+
+# Fix Nginx permissions: create and chown log, temp, and run dirs before switching user
+RUN mkdir -p /var/lib/nginx/tmp /var/lib/nginx/logs /var/log/nginx /run/nginx \
+  && chown -R nginx:nginx /var/lib/nginx /var/log/nginx /run/nginx
+
+COPY --from=installer /app/${directory}frontend/public ./frontend/public
+
+# Only copy dist directory
+COPY --from=installer /app/${directory}frontend/dist ./frontend/dist
+
+# Copy nginx config
+COPY /full/${isWorkspace ? `${directory}docker/` : ''}frontend/frontend.conf /etc/nginx/http.d/default.conf
+
+# Set ownership for all files to nginx
+# Restrict permissions only for frontend app code, keep dependencies writable
+RUN chown -R nginx:nginx /app \
+  && find /app/frontend -type d -exec chmod 755 {} + \
+  && find /app/frontend -type f -exec chmod 444 {} +
+
+WORKDIR /app/frontend
+
+COPY /full/${isWorkspace ? `${directory}docker/` : ''}frontend/entrypoint.sh ./entrypoint.sh
+RUN chown nginx:nginx ./entrypoint.sh && chmod +x ./entrypoint.sh
+
+# Don't run production as root
+USER nginx
+
+# The script will replace the env placeholders with the actual env values
+ENTRYPOINT ["./entrypoint.sh"]
+
+CMD ["nginx", "-g", "daemon off;"]
+`;
+//# sourceMappingURL=frontend-dockerfile.generator.js.map

package/dist/devops/generators/frontend-dockerfile.generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontend-dockerfile.generator.js","sourceRoot":"","sources":["../../../src/devops/generators/frontend-dockerfile.generator.ts"],"names":[],"mappings":";;AAEA,gEAKC;AALD,SAAgB,0BAA0B,CAAC,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAuB;IAC/F,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,KAAK,WAAW,CAAA;IACpD,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,YAAY,WAAW,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IAEhF,OAAO,kBAAkB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;AAC7D,CAAC;AAED,MAAM,kBAAkB,GAAG,CAAC,EAC1B,SAAS,EACT,IAAI,EACJ,WAAW,GAKZ,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAA;;oCAEK,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW;;;;;;;;;;;;;;;;;;;;;;;;SAwBzD,WAAW,CAAC,CAAC,CAAC,mCAAmC,IAAI,qBAAqB,IAAI,8BAA8B,IAAI,MAAM,CAAC,CAAC,CAAC,oCAAoC,IAAI,8BAA8B,IAAI,MAAM;;;;;;;;;;;;;6BAarL,SAAS;;;6BAGT,SAAS;;;aAGzB,WAAW,CAAC,CAAC,CAAC,GAAG,SAAS,SAAS,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;aAUxC,WAAW,CAAC,CAAC,CAAC,GAAG,SAAS,SAAS,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;CAUpD,CAAA"}

package/dist/devops/generators/jenkinsfile.generator.d.ts

@@ -0,0 +1,2 @@
+import { DevOpsContextResult } from '../devops.generator';
+export declare function generateJenkinsfile({ devOps: { database, keycloak, useS3 }, schema: { slug, projectType }, }: DevOpsContextResult): string;

package/dist/devops/generators/jenkinsfile.generator.js

@@ -0,0 +1,147 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateJenkinsfile = generateJenkinsfile;
+function generateJenkinsfile({ devOps: { database, keycloak, useS3 }, schema: { slug, projectType }, }) {
+    // replace all hyphens with underscores to make the name a valid Jenkinsfile name
+    const name = slug.replaceAll('-', '_');
+    const dbSecrets = database
+        ? `
+    [envVar: 'DB_USERNAME', secretRef: 'op://PostXL service/PSQL Credentials for ${name}/username'],
+    [envVar: 'DB_PASSWORD', secretRef: 'op://PostXL service/PSQL Credentials for ${name}/password'],
+    `
+        : '';
+    const keycloakSecrets = keycloak
+        ? `
+    [envVar: 'KEYCLOAK_CLIENT_SECRET', secretRef: 'op://PostXL service/Keycloak Client Secret for ${name}/password'],
+    `
+        : '';
+    const keycloakEnv = keycloak
+        ? `
+        KEYCLOAK_URL = "https://auth.postxl.com"
+        KEYCLOAK_CLIENT_ID = "${slug}-client"
+        KEYCLOAK_REALM = "${slug}"
+        KEYCLOAK_REDIRECT_URL = "\${API_URL}/auth/callback"
+        KEYCLOAK_LOGOUT_REDIRECT_URL = "\${FRONTEND_URL}"
+        `
+        : '';
+    const dbEnv = database
+        ? `
+                                      -e DATABASE_CONNECTION=postgresql://\${DB_USERNAME}:\${DB_PASSWORD}@10.11.0.4/\${PROJECT_NAME} \\`
+        : '';
+    const keycloakRunEnv = keycloak
+        ? `
+                                      -e KEYCLOAK_URL=\${KEYCLOAK_URL} \\
+                                      -e KEYCLOAK_CLIENT_ID=\${KEYCLOAK_CLIENT_ID} \\
+                                      -e KEYCLOAK_CLIENT_SECRET=\${KEYCLOAK_CLIENT_SECRET} \\
+                                      -e KEYCLOAK_REALM=\${KEYCLOAK_REALM} \\
+                                      -e KEYCLOAK_REDIRECT_URL=\${KEYCLOAK_REDIRECT_URL} \\
+                                      -e KEYCLOAK_LOGOUT_REDIRECT_URL=\${KEYCLOAK_LOGOUT_REDIRECT_URL} \\`
+        : '';
+    const keycloakRunEnvFrontend = keycloak
+        ? `
+                                  -e VITE_PUBLIC_KEYCLOAK_URL=\${KEYCLOAK_URL} \\
+                                  -e VITE_PUBLIC_KEYCLOAK_CLIENT_ID=\${KEYCLOAK_CLIENT_ID} \\
+                                  -e VITE_PUBLIC_KEYCLOAK_REALM=\${KEYCLOAK_REALM} \\`
+        : '';
+    const s3Env = useS3
+        ? `
+        AWS_BUCKET="notused"
+        AWS_FILE_PREFIX="notused"
+        AWS_REGION="eu-central-1"
+        `
+        : '';
+    const s3RunEnv = useS3
+        ? `
+                                      -e AWS_BUCKET=\${AWS_BUCKET} \\
+                                      -e AWS_FILE_PREFIX=\${AWS_FILE_PREFIX} \\
+                                      -e AWS_REGION=\${AWS_REGION} \\`
+        : '';
+    return /*Jenkinsfile*/ `
+def secrets = [${dbSecrets}${keycloakSecrets}
+  [envVar: 'TURBO_TOKEN', secretRef: 'op://PostXL service/Turborepo Cache Token/password'],
+  [envVar: 'MAPBOX_ACCESS_TOKEN', secretRef: 'op://PostXL service/Mapbox Access Token/password'],
+]
+
+pipeline {
+    agent any
+    options {
+        ansiColor('xterm')
+    }
+    tools {
+      nodejs 'NodeJS'
+    }
+    environment {
+        PROJECT_NAME = "${name}"
+        TARGET_NODE = "demo-node-1"
+        REGISTRY = "10.11.0.3:5000"
+        SSH_COMMAND = "ssh -o StrictHostKeyChecking=no root@\${TARGET_NODE}"
+        APP_SECRET = "secret"
+
+        API_URL = "https://${slug}-api.postxl.com"
+        API_PORT = "3001"
+        PORT_MAPPING_BACKEND = "4011:\${API_PORT}"
+        FRONTEND_URL = "https://${slug}.postxl.com"
+        PORT_MAPPING_FRONTEND = "4010:8080"
+        ${keycloakEnv}${s3Env}
+        XLPORT_APIKEY = "pass123"
+    }
+    stages{
+        stage('Build backend docker prod image') {
+          steps {
+            withSecrets(secrets: secrets) {
+              sh "./${projectType.kind === 'standalone' ? '' : `projects/${projectType.projectDirectory}/`}docker/backend/build.sh"
+            }
+          }
+        }
+
+        stage('Build frontend docker prod image') {
+          steps {
+            withSecrets(secrets: secrets) {
+              sh "./${projectType.kind === 'standalone' ? '' : `projects/${projectType.projectDirectory}/`}docker/frontend/build.sh"
+            }
+          }
+        }
+
+        stage('Tag and push images to local registry') {
+            steps {
+              sh "docker tag \${PROJECT_NAME}_backend:latest \${REGISTRY}/\${PROJECT_NAME}_backend:latest"
+              sh "docker tag \${PROJECT_NAME}_frontend:latest \${REGISTRY}/\${PROJECT_NAME}_frontend:latest"
+              sh "docker push \${REGISTRY}/\${PROJECT_NAME}_backend:latest"
+              sh "docker push \${REGISTRY}/\${PROJECT_NAME}_frontend:latest"
+            }
+        }
+
+        stage('deploy backend docker prod image') {
+            steps {
+              withSecrets(secrets: secrets) {
+                sshagent(['postxl-jenkins-ssh-credentials']) {
+                  sh "\${SSH_COMMAND} docker pull \${REGISTRY}/\${PROJECT_NAME}_backend"
+                  sh "\${SSH_COMMAND} docker pull \${REGISTRY}/\${PROJECT_NAME}_frontend"
+                  sh "\${SSH_COMMAND} docker stop \${PROJECT_NAME}_backend || true"
+                  sh "\${SSH_COMMAND} docker stop \${PROJECT_NAME}_frontend || true"
+                  sh "\${SSH_COMMAND} docker rm -v \${PROJECT_NAME}_backend || true"
+                  sh "\${SSH_COMMAND} docker rm \${PROJECT_NAME}_frontend || true"
+                  sh "\${SSH_COMMAND} docker run -d --name \${PROJECT_NAME}_backend \\
+                                      -e API_URL=\${API_URL} \\
+                                      -e API_PORT=\${API_PORT} \\
+                                      -e APP_SECRET=\${APP_SECRET} \\${dbEnv}${keycloakRunEnv}${s3RunEnv}
+                                      -e XLPORT_APIKEY=\${XLPORT_APIKEY} \\
+                                      -p 0.0.0.0:\${PORT_MAPPING_BACKEND} \\
+                                      \${REGISTRY}/\${PROJECT_NAME}_backend:latest"
+                  sh "\${SSH_COMMAND} docker run -d --name \${PROJECT_NAME}_frontend \\
+                                  -e VITE_PUBLIC_API_URL=\${API_URL} \\
+                                  -e VITE_PUBLIC_BASE_URL=\${FRONTEND_URL} \\
+                                  -e VITE_PUBLIC_MAPBOX_ACCESS_TOKEN=\${MAPBOX_ACCESS_TOKEN} \\
+                                  -e VITE_PUBLIC_ENABLE_ANALYTICS=false \\${keycloakRunEnvFrontend}
+                                  -e VITE_PUBLIC_CHECK_LOGIN_IFRAME=true \\
+                                  -p 0.0.0.0:\${PORT_MAPPING_FRONTEND} \\
+                                  \${REGISTRY}/\${PROJECT_NAME}_frontend:latest"
+                }
+              }
+            }
+        }
+    }
+}
+`;
+}
+//# sourceMappingURL=jenkinsfile.generator.js.map

package/dist/devops/generators/jenkinsfile.generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jenkinsfile.generator.js","sourceRoot":"","sources":["../../../src/devops/generators/jenkinsfile.generator.ts"],"names":[],"mappings":";;AAEA,kDAyJC;AAzJD,SAAgB,mBAAmB,CAAC,EAClC,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,EACrC,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,GACT;IACpB,iFAAiF;IACjF,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACtC,MAAM,SAAS,GAAG,QAAQ;QACxB,CAAC,CAAC;mFAC6E,IAAI;mFACJ,IAAI;KAClF;QACD,CAAC,CAAC,EAAE,CAAA;IAEN,MAAM,eAAe,GAAG,QAAQ;QAC9B,CAAC,CAAC;oGAC8F,IAAI;KACnG;QACD,CAAC,CAAC,EAAE,CAAA;IAEN,MAAM,WAAW,GAAG,QAAQ;QAC1B,CAAC,CAAC;;gCAE0B,IAAI;4BACR,IAAI;;;SAGvB;QACL,CAAC,CAAC,EAAE,CAAA;IAEN,MAAM,KAAK,GAAG,QAAQ;QACpB,CAAC,CAAC;wIACkI;QACpI,CAAC,CAAC,EAAE,CAAA;IAEN,MAAM,cAAc,GAAG,QAAQ;QAC7B,CAAC,CAAC;;;;;;0GAMoG;QACtG,CAAC,CAAC,EAAE,CAAA;IAEN,MAAM,sBAAsB,GAAG,QAAQ;QACrC,CAAC,CAAC;;;sFAGgF;QAClF,CAAC,CAAC,EAAE,CAAA;IAEN,MAAM,KAAK,GAAG,KAAK;QACjB,CAAC,CAAC;;;;SAIG;QACL,CAAC,CAAC,EAAE,CAAA;IAEN,MAAM,QAAQ,GAAG,KAAK;QACpB,CAAC,CAAC;;;sEAGgE;QAClE,CAAC,CAAC,EAAE,CAAA;IAEN,OAAO,eAAe,CAAC;iBACR,SAAS,GAAG,eAAe;;;;;;;;;;;;;;0BAclB,IAAI;;;;;;6BAMD,IAAI;;;kCAGC,IAAI;;UAE5B,WAAW,GAAG,KAAK;;;;;;;sBAOP,WAAW,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,WAAW,CAAC,gBAAgB,GAAG;;;;;;;;sBAQpF,WAAW,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,WAAW,CAAC,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;uEA2BnC,KAAK,GAAG,cAAc,GAAG,QAAQ;;;;;;;;4EAQ5B,sBAAsB;;;;;;;;;;CAUjG,CAAA;AACD,CAAC"}

package/dist/devops/generators/root-dotenv-example.generator.d.ts

@@ -0,0 +1,2 @@
+import { DevOpsContext } from '../devops.generator';
+export declare function generateDotEnvExample({ database }: DevOpsContext): string;

package/dist/devops/generators/root-dotenv-example.generator.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateDotEnvExample = generateDotEnvExample;
+function generateDotEnvExample({ database }) {
+    if (database) {
+        return `DATABASE_CONNECTION=${database.connectionString}`;
+    }
+    return '';
+}
+//# sourceMappingURL=root-dotenv-example.generator.js.map

package/dist/devops/generators/root-dotenv-example.generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-dotenv-example.generator.js","sourceRoot":"","sources":["../../../src/devops/generators/root-dotenv-example.generator.ts"],"names":[],"mappings":";;AAEA,sDAKC;AALD,SAAgB,qBAAqB,CAAC,EAAE,QAAQ,EAAiB;IAC/D,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,uBAAuB,QAAQ,CAAC,gBAAgB,EAAE,CAAA;IAC3D,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC"}

package/dist/devops/index.d.ts

@@ -0,0 +1,4 @@
+import * as Generator from './devops.generator';
+export type WithDevOps<Context> = Generator.WithDevOps<Context>;
+export declare const configureDevopsGenerator: (config?: Partial<Generator.DevOpsConfig>) => import("@postxl/generator").GeneratorInterface;
+export declare const devOpsGeneratorId: string & import("zod").BRAND<"PXL.GeneratorInterfaceId">;

package/dist/devops/index.js

@@ -0,0 +1,40 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.devOpsGeneratorId = exports.configureDevopsGenerator = void 0;
+const Generator = __importStar(require("./devops.generator"));
+exports.configureDevopsGenerator = Generator.configureDevopsGenerator;
+exports.devOpsGeneratorId = Generator.generatorId;
+//# sourceMappingURL=index.js.map

package/dist/devops/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/devops/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8DAA+C;AAGlC,QAAA,wBAAwB,GAAG,SAAS,CAAC,wBAAwB,CAAA;AAC7D,QAAA,iBAAiB,GAAG,SAAS,CAAC,WAAW,CAAA"}

package/dist/devops/template/.github/workflows/test.yml

@@ -0,0 +1,45 @@
+name: Test Project
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    name: Test Project
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Main
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4.3.1
+
+      - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda #v4.1.0
+
+      - name: Setup Node Environment
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 #v4.4.0
+        with:
+          node-version-file: ".nvmrc"
+          cache: "pnpm"
+
+      - name: Install Dependencies
+        run: pnpm i --frozen-lockfile
+
+      # Build Web before testing. Otherwise Types of SVG files won't work.
+      - name: Build Frontend
+        run: pnpm run build
+        working-directory: frontend
+        env:
+          # This must match the environment variables from .env.example!
+          VITE_PUBLIC_API_URL: http://localhost:3001
+          VITE_PUBLIC_BASE_URL: http://localhost:3000
+
+      - name: Test Packages
+        run: pnpm run test
+
+      - name: Lint Code
+        run: pnpm run lint

package/dist/devops/template/docker/backend/migrate.sh

@@ -0,0 +1,10 @@
+#!/bin/sh
+
+export DATABASE_CONNECTION="postgresql://${DBUSERNAME}:${DBPASSWORD}@${DBHOST}/${POSTGRESQL_DB_NAME}"
+echo "postgresql://${DBUSERNAME}:***@${DBHOST}/${POSTGRESQL_DB_NAME}"
+
+/bin/pwd
+cd /app
+echo "##################### STARTING DB MIGRATION #####################"
+npx prisma migrate deploy
+echo "##################### DB MIGRATION COMPLETED #####################"

package/dist/devops/template/docker/backend/start.api.sh

@@ -0,0 +1,8 @@
+#!/bin/sh
+/bin/pwd
+
+cd /app
+npx prisma migrate deploy
+
+cd /app/backend/
+npm run start

package/dist/devops/template/docker/frontend/entrypoint.sh

@@ -0,0 +1,18 @@
+#!/bin/sh
+
+if [ -z "$VITE_PUBLIC_API_URL" ] || [ -z "$VITE_PUBLIC_BASE_URL" ] || [ -z "$VITE_PUBLIC_MAPBOX_ACCESS_TOKEN" ] || [ -z "$VITE_PUBLIC_ENABLE_ANALYTICS" ] || [ -z "$VITE_PUBLIC_KEYCLOAK_URL" ] || [ -z "$VITE_PUBLIC_KEYCLOAK_CLIENT_ID" ] || [ -z "$VITE_PUBLIC_KEYCLOAK_REALM" ] || [ -z "$VITE_PUBLIC_CHECK_LOGIN_IFRAME" ]; then
+  echo "Error: VITE_PUBLIC_API_URL, VITE_PUBLIC_BASE_URL, VITE_PUBLIC_MAPBOX_ACCESS_TOKEN, VITE_PUBLIC_ENABLE_ANALYTICS, VITE_PUBLIC_KEYCLOAK_URL, VITE_PUBLIC_KEYCLOAK_CLIENT_ID, VITE_PUBLIC_KEYCLOAK_REALM, VITE_PUBLIC_CHECK_LOGIN_IFRAME is not defined" >&2
+  exit 1
+fi
+
+find /app/frontend/dist \( -type d -name .git -prune \) -o -type f -print0 | xargs -0 sed -i "s#PLACEHOLDER_VITE_PUBLIC_API_URL#$VITE_PUBLIC_API_URL#g"
+find /app/frontend/dist \( -type d -name .git -prune \) -o -type f -print0 | xargs -0 sed -i "s#PLACEHOLDER_VITE_PUBLIC_BASE_URL#$VITE_PUBLIC_BASE_URL#g"
+find /app/frontend/dist \( -type d -name .git -prune \) -o -type f -print0 | xargs -0 sed -i "s#PLACEHOLDER_VITE_PUBLIC_MAPBOX_ACCESS_TOKEN#$VITE_PUBLIC_MAPBOX_ACCESS_TOKEN#g"
+find /app/frontend/dist \( -type d -name .git -prune \) -o -type f -print0 | xargs -0 sed -i "s#PLACEHOLDER_VITE_PUBLIC_ENABLE_ANALYTICS#$VITE_PUBLIC_ENABLE_ANALYTICS#g"
+find /app/frontend/dist \( -type d -name .git -prune \) -o -type f -print0 | xargs -0 sed -i "s#PLACEHOLDER_VITE_PUBLIC_ANALYTICS_SCRIPT_URL#$VITE_PUBLIC_ANALYTICS_SCRIPT_URL#g"
+find /app/frontend/dist \( -type d -name .git -prune \) -o -type f -print0 | xargs -0 sed -i "s#PLACEHOLDER_VITE_PUBLIC_KEYCLOAK_URL#$VITE_PUBLIC_KEYCLOAK_URL#g"
+find /app/frontend/dist \( -type d -name .git -prune \) -o -type f -print0 | xargs -0 sed -i "s#PLACEHOLDER_VITE_PUBLIC_KEYCLOAK_CLIENT_ID#$VITE_PUBLIC_KEYCLOAK_CLIENT_ID#g"
+find /app/frontend/dist \( -type d -name .git -prune \) -o -type f -print0 | xargs -0 sed -i "s#PLACEHOLDER_VITE_PUBLIC_KEYCLOAK_REALM#$VITE_PUBLIC_KEYCLOAK_REALM#g"
+find /app/frontend/dist \( -type d -name .git -prune \) -o -type f -print0 | xargs -0 sed -i "s#PLACEHOLDER_VITE_PUBLIC_CHECK_LOGIN_IFRAME#$VITE_PUBLIC_CHECK_LOGIN_IFRAME#g"
+
+exec "$@"