@ripla/godd-mcp 0.1.2-beta-20260312091403

package/templates/terraform/aws/vpc.tf.hbs

@@ -0,0 +1,63 @@
+resource "aws_vpc" "main" {
+  cidr_block           = local.vpc_cidr
+  enable_dns_support   = true
+  enable_dns_hostnames = true
+
+  tags = merge(local.tags, { Name = "${local.project}-vpc" })
+}
+
+resource "aws_internet_gateway" "main" {
+  vpc_id = aws_vpc.main.id
+  tags   = merge(local.tags, { Name = "${local.project}-igw" })
+}
+
+resource "aws_subnet" "public_1a" {
+  vpc_id                  = aws_vpc.main.id
+  cidr_block              = local.public_subnet_1a
+  availability_zone       = "{{region}}a"
+  map_public_ip_on_launch = true
+  tags                    = merge(local.tags, { Name = "${local.project}-public-1a" })
+}
+
+resource "aws_subnet" "public_1c" {
+  vpc_id                  = aws_vpc.main.id
+  cidr_block              = local.public_subnet_1c
+  availability_zone       = "{{region}}c"
+  map_public_ip_on_launch = true
+  tags                    = merge(local.tags, { Name = "${local.project}-public-1c" })
+}
+
+resource "aws_subnet" "private_1a" {
+  vpc_id            = aws_vpc.main.id
+  cidr_block        = local.private_subnet_1a
+  availability_zone = "{{region}}a"
+  tags              = merge(local.tags, { Name = "${local.project}-private-1a" })
+}
+
+resource "aws_subnet" "private_1c" {
+  vpc_id            = aws_vpc.main.id
+  cidr_block        = local.private_subnet_1c
+  availability_zone = "{{region}}c"
+  tags              = merge(local.tags, { Name = "${local.project}-private-1c" })
+}
+
+resource "aws_route_table" "public" {
+  vpc_id = aws_vpc.main.id
+  tags   = merge(local.tags, { Name = "${local.project}-public-rt" })
+}
+
+resource "aws_route" "public_internet" {
+  route_table_id         = aws_route_table.public.id
+  destination_cidr_block = "0.0.0.0/0"
+  gateway_id             = aws_internet_gateway.main.id
+}
+
+resource "aws_route_table_association" "public_1a" {
+  subnet_id      = aws_subnet.public_1a.id
+  route_table_id = aws_route_table.public.id
+}
+
+resource "aws_route_table_association" "public_1c" {
+  subnet_id      = aws_subnet.public_1c.id
+  route_table_id = aws_route_table.public.id
+}

package/templates/terraform/azure/backend.tf.hbs

@@ -0,0 +1,8 @@
+terraform {
+  backend "azurerm" {
+    resource_group_name  = "godd-notes-tfstate"
+    storage_account_name = "goddnotestfstate"
+    container_name       = "tfstate"
+    key                  = "{{env}}/terraform.tfstate"
+  }
+}

package/templates/terraform/azure/iam.tf.hbs

@@ -0,0 +1,36 @@
+# --- Federated Credentials (GitHub Actions OIDC) ---
+data "azurerm_client_config" "current" {}
+
+resource "azurerm_user_assigned_identity" "deploy" {
+  name                = "godd-deploy"
+  resource_group_name = azurerm_resource_group.main.name
+  location            = local.location
+  tags                = local.tags
+}
+
+resource "azurerm_federated_identity_credential" "github" {
+  name                = "github-actions"
+  resource_group_name = azurerm_resource_group.main.name
+  parent_id           = azurerm_user_assigned_identity.deploy.id
+  audience            = ["api://AzureADTokenExchange"]
+  issuer              = "https://token.actions.githubusercontent.com"
+  subject             = "repo:{{githubOwner}}/{{githubRepo}}:ref:refs/heads/main"
+}
+
+resource "azurerm_role_assignment" "acr_push" {
+  scope                = azurerm_container_registry.main.id
+  role_definition_name = "AcrPush"
+  principal_id         = azurerm_user_assigned_identity.deploy.principal_id
+}
+
+resource "azurerm_role_assignment" "container_app_contributor" {
+  scope                = azurerm_resource_group.main.id
+  role_definition_name = "Contributor"
+  principal_id         = azurerm_user_assigned_identity.deploy.principal_id
+}
+
+resource "azurerm_role_assignment" "storage_contributor" {
+  scope                = azurerm_storage_account.notes_app.id
+  role_definition_name = "Storage Blob Data Contributor"
+  principal_id         = azurerm_user_assigned_identity.deploy.principal_id
+}

package/templates/terraform/azure/main.tf.hbs

@@ -0,0 +1,199 @@
+locals {
+  project  = "godd-ripla-notes"
+  env      = "{{env}}"
+  location = "{{region}}"
+
+  github_owner = "{{githubOwner}}"
+  github_repo  = "{{githubRepo}}"
+
+  tags = {
+    project     = local.project
+    environment = local.env
+    managed-by  = "terraform"
+  }
+}
+
+# --- Resource Group ---
+resource "azurerm_resource_group" "main" {
+  name     = "${local.project}-${local.env}"
+  location = local.location
+  tags     = local.tags
+}
+
+# --- VNet ---
+resource "azurerm_virtual_network" "main" {
+  name                = "${local.project}-vnet"
+  resource_group_name = azurerm_resource_group.main.name
+  location            = local.location
+  address_space       = ["{{vpcCidr}}"]
+  tags                = local.tags
+}
+
+resource "azurerm_subnet" "app" {
+  name                 = "app-subnet"
+  resource_group_name  = azurerm_resource_group.main.name
+  virtual_network_name = azurerm_virtual_network.main.name
+  address_prefixes     = [cidrsubnet("{{vpcCidr}}", 8, 1)]
+
+  delegation {
+    name = "container-apps"
+    service_delegation {
+      name = "Microsoft.App/environments"
+      actions = [
+        "Microsoft.Network/virtualNetworks/subnets/join/action"
+      ]
+    }
+  }
+}
+
+resource "azurerm_subnet" "db" {
+  name                 = "db-subnet"
+  resource_group_name  = azurerm_resource_group.main.name
+  virtual_network_name = azurerm_virtual_network.main.name
+  address_prefixes     = [cidrsubnet("{{vpcCidr}}", 8, 2)]
+
+  delegation {
+    name = "postgresql"
+    service_delegation {
+      name = "Microsoft.DBforPostgreSQL/flexibleServers"
+      actions = [
+        "Microsoft.Network/virtualNetworks/subnets/join/action"
+      ]
+    }
+  }
+}
+
+# --- PostgreSQL Flexible Server ---
+resource "random_password" "db_password" {
+  length  = 32
+  special = false
+}
+
+resource "azurerm_postgresql_flexible_server" "main" {
+  name                   = "${local.project}-db-${local.env}"
+  resource_group_name    = azurerm_resource_group.main.name
+  location               = local.location
+  version                = "16"
+  administrator_login    = "app_user"
+  administrator_password = random_password.db_password.result
+  sku_name               = "{{dbSku}}"
+  storage_mb             = 32768
+  delegated_subnet_id    = azurerm_subnet.db.id
+  zone                   = "1"
+  tags                   = local.tags
+}
+
+resource "azurerm_postgresql_flexible_server_database" "notes" {
+  name      = "notes"
+  server_id = azurerm_postgresql_flexible_server.main.id
+}
+
+# --- Container Registry ---
+resource "azurerm_container_registry" "main" {
+  name                = replace("${local.project}${local.env}acr", "-", "")
+  resource_group_name = azurerm_resource_group.main.name
+  location            = local.location
+  sku                 = "Basic"
+  admin_enabled       = false
+  tags                = local.tags
+}
+
+# --- Log Analytics ---
+resource "azurerm_log_analytics_workspace" "main" {
+  name                = "${local.project}-logs"
+  resource_group_name = azurerm_resource_group.main.name
+  location            = local.location
+  sku                 = "PerGB2018"
+  retention_in_days   = 30
+  tags                = local.tags
+}
+
+# --- Container Apps Environment ---
+resource "azurerm_container_app_environment" "main" {
+  name                       = "${local.project}-env"
+  resource_group_name        = azurerm_resource_group.main.name
+  location                   = local.location
+  log_analytics_workspace_id = azurerm_log_analytics_workspace.main.id
+  tags                       = local.tags
+}
+
+# --- Container App (notes-api) ---
+resource "azurerm_container_app" "api" {
+  name                         = "${local.project}-api"
+  container_app_environment_id = azurerm_container_app_environment.main.id
+  resource_group_name          = azurerm_resource_group.main.name
+  revision_mode                = "Single"
+  tags                         = local.tags
+
+  template {
+    container {
+      name   = "notes-api"
+      image  = "${azurerm_container_registry.main.login_server}/notes-api:latest"
+      cpu    = {{cpuLimit}}
+      memory = "{{memoryLimit}}"
+
+      env {
+        name  = "DB_NAME"
+        value = "notes"
+      }
+      env {
+        name  = "API_HOST"
+        value = "0.0.0.0"
+      }
+      env {
+        name  = "API_PORT"
+        value = "3100"
+      }
+    }
+
+    min_replicas = 0
+    max_replicas = 2
+  }
+
+  ingress {
+    external_enabled = true
+    target_port      = 3100
+    transport        = "auto"
+
+    traffic_weight {
+      percentage      = 100
+      latest_revision = true
+    }
+  }
+}
+
+# --- Storage Account (notes-app SPA) ---
+resource "azurerm_storage_account" "notes_app" {
+  name                     = replace("${local.project}${local.env}app", "-", "")
+  resource_group_name      = azurerm_resource_group.main.name
+  location                 = local.location
+  account_tier             = "Standard"
+  account_replication_type = "LRS"
+  tags                     = local.tags
+
+  static_website {
+    index_document     = "index.html"
+    error_404_document = "index.html"
+  }
+}
+
+# --- CDN (Front Door alternative — CDN Profile + Endpoint) ---
+resource "azurerm_cdn_profile" "main" {
+  name                = "${local.project}-cdn"
+  resource_group_name = azurerm_resource_group.main.name
+  location            = "global"
+  sku                 = "Standard_Microsoft"
+  tags                = local.tags
+}
+
+resource "azurerm_cdn_endpoint" "app" {
+  name                = "${local.project}-app"
+  profile_name        = azurerm_cdn_profile.main.name
+  resource_group_name = azurerm_resource_group.main.name
+  location            = "global"
+
+  origin {
+    name      = "spa"
+    host_name = azurerm_storage_account.notes_app.primary_web_host
+  }
+}

package/templates/terraform/azure/output.tf.hbs

@@ -0,0 +1,19 @@
+output "container_app_url" {
+  value = "https://${azurerm_container_app.api.latest_revision_fqdn}"
+}
+
+output "notes_app_url" {
+  value = azurerm_storage_account.notes_app.primary_web_endpoint
+}
+
+output "cdn_endpoint" {
+  value = azurerm_cdn_endpoint.app.fqdn
+}
+
+output "acr_login_server" {
+  value = azurerm_container_registry.main.login_server
+}
+
+output "db_host" {
+  value = azurerm_postgresql_flexible_server.main.fqdn
+}

package/templates/terraform/azure/provider.tf.hbs

@@ -0,0 +1,19 @@
+terraform {
+  required_version = ">= 1.5"
+
+  required_providers {
+    azurerm = {
+      source  = "hashicorp/azurerm"
+      version = "~> 3.80"
+    }
+    random = {
+      source  = "hashicorp/random"
+      version = "~> 3.0"
+    }
+  }
+}
+
+provider "azurerm" {
+  features {}
+  subscription_id = "{{subscriptionId}}"
+}

package/templates/terraform/gcp/backend.tf.hbs

@@ -0,0 +1,6 @@
+terraform {
+  backend "gcs" {
+    bucket = "godd-ripla-notes-tfstate-{{projectId}}"
+    prefix = "{{env}}/terraform.tfstate"
+  }
+}

package/templates/terraform/gcp/iam.tf.hbs

@@ -0,0 +1,47 @@
+# --- Workload Identity Federation (GitHub Actions OIDC) ---
+resource "google_iam_workload_identity_pool" "github" {
+  workload_identity_pool_id = "github-pool"
+  display_name              = "GitHub Pool"
+}
+
+resource "google_iam_workload_identity_pool_provider" "github" {
+  workload_identity_pool_id          = google_iam_workload_identity_pool.github.workload_identity_pool_id
+  workload_identity_pool_provider_id = "github-provider"
+  display_name                       = "GitHub Provider"
+
+  attribute_mapping = {
+    "google.subject"       = "assertion.sub"
+    "attribute.repository" = "assertion.repository"
+    "attribute.actor"      = "assertion.actor"
+  }
+
+  oidc {
+    issuer_uri = "https://token.actions.githubusercontent.com"
+  }
+
+  attribute_condition = "assertion.repository == '{{githubOwner}}/{{githubRepo}}'"
+}
+
+resource "google_service_account" "deploy" {
+  account_id   = "godd-deploy"
+  display_name = "GoDD Deploy Service Account"
+}
+
+resource "google_service_account_iam_member" "workload_identity" {
+  service_account_id = google_service_account.deploy.name
+  role               = "roles/iam.workloadIdentityUser"
+  member             = "principalSet://iam.googleapis.com/${google_iam_workload_identity_pool.github.name}/attribute.repository/{{githubOwner}}/{{githubRepo}}"
+}
+
+resource "google_project_iam_member" "deploy_roles" {
+  for_each = toset([
+    "roles/run.admin",
+    "roles/artifactregistry.writer",
+    "roles/storage.admin",
+    "roles/iam.serviceAccountUser",
+  ])
+
+  project = "{{projectId}}"
+  role    = each.key
+  member  = "serviceAccount:${google_service_account.deploy.email}"
+}

package/templates/terraform/gcp/main.tf.hbs

@@ -0,0 +1,171 @@
+locals {
+  project    = "godd-ripla-notes"
+  env        = "{{env}}"
+  project_id = "{{projectId}}"
+  region     = "{{region}}"
+
+  github_owner = "{{githubOwner}}"
+  github_repo  = "{{githubRepo}}"
+
+  labels = {
+    project     = local.project
+    environment = local.env
+    managed-by  = "terraform"
+  }
+}
+
+# --- VPC ---
+resource "google_compute_network" "main" {
+  name                    = "${local.project}-vpc"
+  auto_create_subnetworks = false
+}
+
+resource "google_compute_subnetwork" "main" {
+  name          = "${local.project}-subnet"
+  ip_cidr_range = "{{vpcCidr}}"
+  region        = local.region
+  network       = google_compute_network.main.id
+}
+
+# --- Cloud SQL (PostgreSQL) ---
+resource "google_sql_database_instance" "main" {
+  name             = "${local.project}-db-${local.env}"
+  database_version = "POSTGRES_16"
+  region           = local.region
+
+  settings {
+    tier              = "{{dbTier}}"
+    availability_type = "ZONAL"
+    disk_size         = 20
+    disk_type         = "PD_SSD"
+
+    ip_configuration {
+      ipv4_enabled = true
+    }
+
+    backup_configuration {
+      enabled = true
+    }
+  }
+
+  deletion_protection = local.env != "dev"
+}
+
+resource "google_sql_database" "notes" {
+  name     = "notes"
+  instance = google_sql_database_instance.main.name
+}
+
+resource "random_password" "db_password" {
+  length  = 32
+  special = false
+}
+
+resource "google_sql_user" "app" {
+  name     = "app_user"
+  instance = google_sql_database_instance.main.name
+  password = random_password.db_password.result
+}
+
+# --- Artifact Registry ---
+resource "google_artifact_registry_repository" "notes_api" {
+  location      = local.region
+  repository_id = "godd-notes-api"
+  format        = "DOCKER"
+  labels        = local.labels
+}
+
+# --- Cloud Run (notes-api) ---
+resource "google_cloud_run_v2_service" "api" {
+  name     = "${local.project}-api"
+  location = local.region
+  labels   = local.labels
+
+  template {
+    containers {
+      image = "${local.region}-docker.pkg.dev/${local.project_id}/${google_artifact_registry_repository.notes_api.repository_id}/notes-api:latest"
+
+      ports {
+        container_port = 3100
+      }
+
+      resources {
+        limits = {
+          cpu    = "{{cpuLimit}}"
+          memory = "{{memoryLimit}}"
+        }
+      }
+
+      env {
+        name  = "DB_NAME"
+        value = "notes"
+      }
+      env {
+        name  = "API_HOST"
+        value = "0.0.0.0"
+      }
+      env {
+        name  = "API_PORT"
+        value = "3100"
+      }
+    }
+
+    scaling {
+      min_instance_count = 0
+      max_instance_count = 2
+    }
+  }
+}
+
+resource "google_cloud_run_service_iam_member" "public" {
+  location = google_cloud_run_v2_service.api.location
+  service  = google_cloud_run_v2_service.api.name
+  role     = "roles/run.invoker"
+  member   = "allUsers"
+}
+
+# --- Cloud Storage (notes-app SPA) ---
+resource "google_storage_bucket" "notes_app" {
+  name          = "${local.project}-${local.project_id}"
+  location      = local.region
+  force_destroy = local.env == "dev"
+  labels        = local.labels
+
+  website {
+    main_page_suffix = "index.html"
+    not_found_page   = "index.html"
+  }
+
+  uniform_bucket_level_access = true
+}
+
+resource "google_storage_bucket_iam_member" "public_read" {
+  bucket = google_storage_bucket.notes_app.name
+  role   = "roles/storage.objectViewer"
+  member = "allUsers"
+}
+
+# --- Load Balancer (HTTPS → Cloud Run + GCS) ---
+resource "google_compute_backend_bucket" "notes_app" {
+  name        = "${local.project}-app-backend"
+  bucket_name = google_storage_bucket.notes_app.name
+  enable_cdn  = true
+}
+
+resource "google_compute_region_network_endpoint_group" "api" {
+  name                  = "${local.project}-api-neg"
+  region                = local.region
+  network_endpoint_type = "SERVERLESS"
+
+  cloud_run {
+    service = google_cloud_run_v2_service.api.name
+  }
+}
+
+resource "google_compute_backend_service" "api" {
+  name = "${local.project}-api-backend"
+
+  backend {
+    group = google_compute_region_network_endpoint_group.api.id
+  }
+}

package/templates/terraform/gcp/output.tf.hbs

@@ -0,0 +1,15 @@
+output "cloud_run_url" {
+  value = google_cloud_run_v2_service.api.uri
+}
+
+output "notes_app_url" {
+  value = "https://storage.googleapis.com/${google_storage_bucket.notes_app.name}/index.html"
+}
+
+output "artifact_registry" {
+  value = "${google_artifact_registry_repository.notes_api.location}-docker.pkg.dev/{{projectId}}/${google_artifact_registry_repository.notes_api.repository_id}"
+}
+
+output "cloud_sql_instance" {
+  value = google_sql_database_instance.main.connection_name
+}

package/templates/terraform/gcp/provider.tf.hbs

@@ -0,0 +1,19 @@
+terraform {
+  required_version = ">= 1.5"
+
+  required_providers {
+    google = {
+      source  = "hashicorp/google"
+      version = "~> 5.0"
+    }
+    random = {
+      source  = "hashicorp/random"
+      version = "~> 3.0"
+    }
+  }
+}
+
+provider "google" {
+  project = "{{projectId}}"
+  region  = "{{region}}"
+}

package/templates/terraform/vercel-railway/main.tf.hbs

@@ -0,0 +1,64 @@
+terraform {
+  required_version = ">= 1.5"
+
+  required_providers {
+    vercel = {
+      source  = "vercel/vercel"
+      version = "~> 1.0"
+    }
+  }
+}
+
+provider "vercel" {
+  api_token = var.vercel_api_token
+  team      = var.vercel_team_id != "" ? var.vercel_team_id : null
+}
+
+variable "vercel_api_token" {
+  type      = string
+  sensitive = true
+}
+
+variable "vercel_team_id" {
+  type    = string
+  default = ""
+}
+
+variable "railway_token" {
+  type      = string
+  sensitive = true
+}
+
+locals {
+  project      = "godd-ripla-notes"
+  env          = "{{env}}"
+  github_owner = "{{githubOwner}}"
+  github_repo  = "{{githubRepo}}"
+}
+
+# --- Vercel Project (notes-app SPA) ---
+resource "vercel_project" "notes_app" {
+  name      = "${local.project}-app"
+  framework = "vite"
+
+  git_repository {
+    type = "github"
+    repo = "${local.github_owner}/${local.github_repo}"
+  }
+
+  root_directory  = "notes-app"
+  build_command   = "npm run build"
+  output_directory = "dist"
+
+  environment {
+    key    = "VITE_API_URL"
+    value  = "{{railwayApiUrl}}"
+    target = ["production", "preview"]
+  }
+}
+
+resource "vercel_deployment" "notes_app" {
+  project_id = vercel_project.notes_app.id
+  ref        = "main"
+  production = local.env == "prod"
+}

package/templates/terraform/vercel-railway/output.tf.hbs

@@ -0,0 +1,11 @@
+output "vercel_url" {
+  value = vercel_deployment.notes_app.url
+}
+
+output "vercel_project_id" {
+  value = vercel_project.notes_app.id
+}
+
+output "railway_api_url" {
+  value = "{{railwayApiUrl}}"
+}