@ripla/godd-mcp 1.0.4-canary.8 → 1.0.4

package/templates/terraform/aws/local.tf.hbs

@@ -1,34 +0,0 @@
-locals {
-  project    = "godd-notes"
-  env        = "{{env}}"
-  account_id = "{{accountId}}"
-  region     = "{{region}}"
-
-  # VPC
-  vpc_cidr            = "{{vpcCidr}}"
-  public_subnet_1a    = cidrsubnet(local.vpc_cidr, 8, 1)
-  public_subnet_1c    = cidrsubnet(local.vpc_cidr, 8, 2)
-  private_subnet_1a   = cidrsubnet(local.vpc_cidr, 8, 10)
-  private_subnet_1c   = cidrsubnet(local.vpc_cidr, 8, 11)
-
-  # ECS
-  ecs_cpu    = {{ecsCpu}}
-  ecs_memory = {{ecsMemory}}
-
-  # RDS
-  rds_instance_class = "{{rdsInstanceClass}}"
-  rds_engine_version = "16"
-  rds_db_name        = "notes"
-
-  # Container
-  container_port = 3100
-
-  # GitHub
-  github_owner = "{{githubOwner}}"
-  github_repo  = "{{githubRepo}}"
-
-  tags = {
-    Project     = local.project
-    Environment = local.env
-  }
-}

package/templates/terraform/aws/output.tf.hbs

@@ -1,49 +0,0 @@
-output "cloudfront_domain" {
-  description = "CloudFront distribution domain name"
-  value       = aws_cloudfront_distribution.notes.domain_name
-}
-
-output "cloudfront_distribution_id" {
-  description = "CloudFront distribution ID"
-  value       = aws_cloudfront_distribution.notes.id
-}
-
-output "alb_dns_name" {
-  description = "ALB DNS name"
-  value       = aws_lb.api.dns_name
-}
-
-output "ecr_repository_url" {
-  description = "ECR repository URL for notes-api"
-  value       = aws_ecr_repository.notes_api.repository_url
-}
-
-output "ecs_cluster_name" {
-  description = "ECS cluster name"
-  value       = aws_ecs_cluster.main.name
-}
-
-output "ecs_service_name" {
-  description = "ECS service name"
-  value       = aws_ecs_service.api.name
-}
-
-output "rds_endpoint" {
-  description = "RDS endpoint"
-  value       = aws_db_instance.main.endpoint
-}
-
-output "s3_bucket_name" {
-  description = "S3 bucket name for notes-app"
-  value       = aws_s3_bucket.notes_app.id
-}
-
-output "notes_app_url" {
-  description = "Notes App URL"
-  value       = "https://${aws_cloudfront_distribution.notes.domain_name}"
-}
-
-output "notes_api_url" {
-  description = "Notes API URL"
-  value       = "https://${aws_cloudfront_distribution.notes.domain_name}/api"
-}

package/templates/terraform/aws/provider.tf.hbs

@@ -1,26 +0,0 @@
-terraform {
-  required_version = ">= 1.5"
-
-  required_providers {
-    aws = {
-      source  = "hashicorp/aws"
-      version = "~> 5.0"
-    }
-    random = {
-      source  = "hashicorp/random"
-      version = "~> 3.0"
-    }
-  }
-}
-
-provider "aws" {
-  region = "{{region}}"
-
-  default_tags {
-    tags = {
-      Project     = "godd-notes"
-      Environment = "{{env}}"
-      ManagedBy   = "terraform"
-    }
-  }
-}

package/templates/terraform/aws/rds.tf.hbs

@@ -1,38 +0,0 @@
-resource "aws_db_subnet_group" "main" {
-  name       = "${local.project}-db-subnet"
-  subnet_ids = [aws_subnet.private_1a.id, aws_subnet.private_1c.id]
-  tags       = local.tags
-}
-
-resource "aws_db_instance" "main" {
-  identifier     = "${local.project}-db"
-  engine         = "postgres"
-  engine_version = local.rds_engine_version
-  instance_class = local.rds_instance_class
-
-  allocated_storage     = 20
-  max_allocated_storage = 30
-  storage_type          = "gp3"
-  storage_encrypted     = true
-
-  db_name  = local.rds_db_name
-  username = "app_user"
-  password = random_password.rds_password.result
-
-  db_subnet_group_name   = aws_db_subnet_group.main.name
-  vpc_security_group_ids = [aws_security_group.rds.id]
-
-  multi_az            = false
-  publicly_accessible = false
-
-  backup_retention_period = 7
-  skip_final_snapshot     = local.env == "dev"
-  deletion_protection     = local.env != "dev"
-
-  tags = local.tags
-}
-
-resource "random_password" "rds_password" {
-  length  = 32
-  special = false
-}

package/templates/terraform/aws/s3.tf.hbs

@@ -1,34 +0,0 @@
-resource "aws_s3_bucket" "notes_app" {
-  bucket        = "${local.project}-${local.account_id}"
-  force_destroy = local.env == "dev"
-  tags          = local.tags
-}
-
-resource "aws_s3_bucket_public_access_block" "notes_app" {
-  bucket                  = aws_s3_bucket.notes_app.id
-  block_public_acls       = true
-  block_public_policy     = true
-  ignore_public_acls      = true
-  restrict_public_buckets = true
-}
-
-resource "aws_s3_bucket_policy" "notes_app" {
-  bucket = aws_s3_bucket.notes_app.id
-  policy = jsonencode({
-    Version = "2012-10-17"
-    Statement = [
-      {
-        Sid       = "AllowCloudFrontOAC"
-        Effect    = "Allow"
-        Principal = { Service = "cloudfront.amazonaws.com" }
-        Action    = "s3:GetObject"
-        Resource  = "${aws_s3_bucket.notes_app.arn}/*"
-        Condition = {
-          StringEquals = {
-            "AWS:SourceArn" = aws_cloudfront_distribution.notes.arn
-          }
-        }
-      }
-    ]
-  })
-}

package/templates/terraform/aws/secrets.tf.hbs

@@ -1,53 +0,0 @@
-resource "aws_secretsmanager_secret" "rds_credentials" {
-  name = "godd-notes/${local.env}/rds-credentials"
-  tags = local.tags
-}
-
-resource "aws_secretsmanager_secret_version" "rds_credentials" {
-  secret_id = aws_secretsmanager_secret.rds_credentials.id
-  secret_string = jsonencode({
-    host     = aws_db_instance.main.address
-    username = aws_db_instance.main.username
-    password = random_password.rds_password.result
-  })
-}
-
-resource "aws_secretsmanager_secret" "jwt_secret" {
-  name = "godd-notes/${local.env}/jwt-secret"
-  tags = local.tags
-}
-
-resource "aws_secretsmanager_secret" "github_token" {
-  name = "godd-notes/${local.env}/github-token"
-  tags = local.tags
-}
-
-resource "aws_secretsmanager_secret" "github_app_id" {
-  name = "godd-notes/${local.env}/github-app-id"
-  tags = local.tags
-}
-
-resource "aws_secretsmanager_secret" "github_app_private_key" {
-  name = "godd-notes/${local.env}/github-app-private-key"
-  tags = local.tags
-}
-
-resource "aws_secretsmanager_secret" "github_app_installation_id" {
-  name = "godd-notes/${local.env}/github-app-installation-id"
-  tags = local.tags
-}
-
-resource "aws_secretsmanager_secret" "admin_credentials" {
-  name = "godd-notes/${local.env}/admin-credentials"
-  tags = local.tags
-}
-
-resource "aws_secretsmanager_secret" "origin_verify" {
-  name = "godd-notes/${local.env}/origin-verify"
-  tags = local.tags
-}
-
-resource "aws_secretsmanager_secret_version" "origin_verify" {
-  secret_id     = aws_secretsmanager_secret.origin_verify.id
-  secret_string = random_password.origin_verify.result
-}

package/templates/terraform/aws/security_groups.tf.hbs

@@ -1,81 +0,0 @@
-data "aws_ec2_managed_prefix_list" "cloudfront" {
-  name = "com.amazonaws.global.cloudfront.origin-facing"
-}
-
-resource "aws_security_group" "alb" {
-  name_prefix = "${local.project}-alb-"
-  vpc_id      = aws_vpc.main.id
-  tags        = merge(local.tags, { Name = "${local.project}-alb-sg" })
-
-  lifecycle { create_before_destroy = true }
-}
-
-resource "aws_security_group_rule" "alb_from_cloudfront" {
-  type              = "ingress"
-  from_port         = 80
-  to_port           = 80
-  protocol          = "tcp"
-  prefix_list_ids   = [data.aws_ec2_managed_prefix_list.cloudfront.id]
-  security_group_id = aws_security_group.alb.id
-}
-
-resource "aws_security_group_rule" "alb_to_ecs" {
-  type                     = "egress"
-  from_port                = local.container_port
-  to_port                  = local.container_port
-  protocol                 = "tcp"
-  source_security_group_id = aws_security_group.ecs.id
-  security_group_id        = aws_security_group.alb.id
-}
-
-resource "aws_security_group" "ecs" {
-  name_prefix = "${local.project}-ecs-"
-  vpc_id      = aws_vpc.main.id
-  tags        = merge(local.tags, { Name = "${local.project}-ecs-sg" })
-
-  lifecycle { create_before_destroy = true }
-}
-
-resource "aws_security_group_rule" "ecs_from_alb" {
-  type                     = "ingress"
-  from_port                = local.container_port
-  to_port                  = local.container_port
-  protocol                 = "tcp"
-  source_security_group_id = aws_security_group.alb.id
-  security_group_id        = aws_security_group.ecs.id
-}
-
-resource "aws_security_group_rule" "ecs_to_internet" {
-  type              = "egress"
-  from_port         = 443
-  to_port           = 443
-  protocol          = "tcp"
-  cidr_blocks       = ["0.0.0.0/0"]
-  security_group_id = aws_security_group.ecs.id
-}
-
-resource "aws_security_group_rule" "ecs_to_rds" {
-  type                     = "egress"
-  from_port                = 5432
-  to_port                  = 5432
-  protocol                 = "tcp"
-  source_security_group_id = aws_security_group.rds.id
-  security_group_id        = aws_security_group.ecs.id
-}
-
-resource "aws_security_group" "rds" {
-  name_prefix = "${local.project}-rds-"
-  vpc_id      = aws_vpc.main.id
-  tags        = merge(local.tags, { Name = "${local.project}-rds-sg" })
-
-  lifecycle { create_before_destroy = true }
-}
-
-resource "aws_security_group_rule" "rds_from_ecs" {
-  type                     = "ingress"
-  from_port                = 5432
-  to_port                  = 5432
-  protocol                 = "tcp"
-  source_security_group_id = aws_security_group.ecs.id
-  security_group_id        = aws_security_group.rds.id
-}

package/templates/terraform/aws/vpc.tf.hbs

@@ -1,63 +0,0 @@
-resource "aws_vpc" "main" {
-  cidr_block           = local.vpc_cidr
-  enable_dns_support   = true
-  enable_dns_hostnames = true
-
-  tags = merge(local.tags, { Name = "${local.project}-vpc" })
-}
-
-resource "aws_internet_gateway" "main" {
-  vpc_id = aws_vpc.main.id
-  tags   = merge(local.tags, { Name = "${local.project}-igw" })
-}
-
-resource "aws_subnet" "public_1a" {
-  vpc_id                  = aws_vpc.main.id
-  cidr_block              = local.public_subnet_1a
-  availability_zone       = "{{region}}a"
-  map_public_ip_on_launch = true
-  tags                    = merge(local.tags, { Name = "${local.project}-public-1a" })
-}
-
-resource "aws_subnet" "public_1c" {
-  vpc_id                  = aws_vpc.main.id
-  cidr_block              = local.public_subnet_1c
-  availability_zone       = "{{region}}c"
-  map_public_ip_on_launch = true
-  tags                    = merge(local.tags, { Name = "${local.project}-public-1c" })
-}
-
-resource "aws_subnet" "private_1a" {
-  vpc_id            = aws_vpc.main.id
-  cidr_block        = local.private_subnet_1a
-  availability_zone = "{{region}}a"
-  tags              = merge(local.tags, { Name = "${local.project}-private-1a" })
-}
-
-resource "aws_subnet" "private_1c" {
-  vpc_id            = aws_vpc.main.id
-  cidr_block        = local.private_subnet_1c
-  availability_zone = "{{region}}c"
-  tags              = merge(local.tags, { Name = "${local.project}-private-1c" })
-}
-
-resource "aws_route_table" "public" {
-  vpc_id = aws_vpc.main.id
-  tags   = merge(local.tags, { Name = "${local.project}-public-rt" })
-}
-
-resource "aws_route" "public_internet" {
-  route_table_id         = aws_route_table.public.id
-  destination_cidr_block = "0.0.0.0/0"
-  gateway_id             = aws_internet_gateway.main.id
-}
-
-resource "aws_route_table_association" "public_1a" {
-  subnet_id      = aws_subnet.public_1a.id
-  route_table_id = aws_route_table.public.id
-}
-
-resource "aws_route_table_association" "public_1c" {
-  subnet_id      = aws_subnet.public_1c.id
-  route_table_id = aws_route_table.public.id
-}

package/templates/terraform/azure/backend.tf.hbs

@@ -1,8 +0,0 @@
-terraform {
-  backend "azurerm" {
-    resource_group_name  = "godd-notes-tfstate"
-    storage_account_name = "goddnotestfstate"
-    container_name       = "tfstate"
-    key                  = "{{env}}/terraform.tfstate"
-  }
-}

package/templates/terraform/azure/iam.tf.hbs

@@ -1,36 +0,0 @@
-# --- Federated Credentials (GitHub Actions OIDC) ---
-data "azurerm_client_config" "current" {}
-
-resource "azurerm_user_assigned_identity" "deploy" {
-  name                = "godd-deploy"
-  resource_group_name = azurerm_resource_group.main.name
-  location            = local.location
-  tags                = local.tags
-}
-
-resource "azurerm_federated_identity_credential" "github" {
-  name                = "github-actions"
-  resource_group_name = azurerm_resource_group.main.name
-  parent_id           = azurerm_user_assigned_identity.deploy.id
-  audience            = ["api://AzureADTokenExchange"]
-  issuer              = "https://token.actions.githubusercontent.com"
-  subject             = "repo:{{githubOwner}}/{{githubRepo}}:ref:refs/heads/main"
-}
-
-resource "azurerm_role_assignment" "acr_push" {
-  scope                = azurerm_container_registry.main.id
-  role_definition_name = "AcrPush"
-  principal_id         = azurerm_user_assigned_identity.deploy.principal_id
-}
-
-resource "azurerm_role_assignment" "container_app_contributor" {
-  scope                = azurerm_resource_group.main.id
-  role_definition_name = "Contributor"
-  principal_id         = azurerm_user_assigned_identity.deploy.principal_id
-}
-
-resource "azurerm_role_assignment" "storage_contributor" {
-  scope                = azurerm_storage_account.notes_app.id
-  role_definition_name = "Storage Blob Data Contributor"
-  principal_id         = azurerm_user_assigned_identity.deploy.principal_id
-}

package/templates/terraform/azure/main.tf.hbs

@@ -1,203 +0,0 @@
-locals {
-  project  = "godd-notes"
-  env      = "{{env}}"
-  location = "{{region}}"
-
-  github_owner = "{{githubOwner}}"
-  github_repo  = "{{githubRepo}}"
-
-  tags = {
-    project     = local.project
-    environment = local.env
-    managed-by  = "terraform"
-  }
-}
-
-# --- Resource Group ---
-resource "azurerm_resource_group" "main" {
-  name     = "${local.project}-${local.env}"
-  location = local.location
-  tags     = local.tags
-}
-
-# --- VNet ---
-resource "azurerm_virtual_network" "main" {
-  name                = "${local.project}-vnet"
-  resource_group_name = azurerm_resource_group.main.name
-  location            = local.location
-  address_space       = ["{{vpcCidr}}"]
-  tags                = local.tags
-}
-
-resource "azurerm_subnet" "app" {
-  name                 = "app-subnet"
-  resource_group_name  = azurerm_resource_group.main.name
-  virtual_network_name = azurerm_virtual_network.main.name
-  address_prefixes     = [cidrsubnet("{{vpcCidr}}", 8, 1)]
-
-  delegation {
-    name = "container-apps"
-    service_delegation {
-      name = "Microsoft.App/environments"
-      actions = [
-        "Microsoft.Network/virtualNetworks/subnets/join/action"
-      ]
-    }
-  }
-}
-
-resource "azurerm_subnet" "db" {
-  name                 = "db-subnet"
-  resource_group_name  = azurerm_resource_group.main.name
-  virtual_network_name = azurerm_virtual_network.main.name
-  address_prefixes     = [cidrsubnet("{{vpcCidr}}", 8, 2)]
-
-  delegation {
-    name = "postgresql"
-    service_delegation {
-      name = "Microsoft.DBforPostgreSQL/flexibleServers"
-      actions = [
-        "Microsoft.Network/virtualNetworks/subnets/join/action"
-      ]
-    }
-  }
-}
-
-# --- PostgreSQL Flexible Server ---
-resource "random_password" "db_password" {
-  length  = 32
-  special = false
-}
-
-resource "azurerm_postgresql_flexible_server" "main" {
-  name                   = "${local.project}-db-${local.env}"
-  resource_group_name    = azurerm_resource_group.main.name
-  location               = local.location
-  version                = "16"
-  administrator_login    = "app_user"
-  administrator_password = random_password.db_password.result
-  sku_name               = "{{dbSku}}"
-  storage_mb             = 32768
-  delegated_subnet_id    = azurerm_subnet.db.id
-  zone                   = "1"
-  tags                   = local.tags
-}
-
-resource "azurerm_postgresql_flexible_server_database" "notes" {
-  name      = "notes"
-  server_id = azurerm_postgresql_flexible_server.main.id
-}
-
-# --- Container Registry ---
-resource "azurerm_container_registry" "main" {
-  name                = replace("${local.project}${local.env}acr", "-", "")
-  resource_group_name = azurerm_resource_group.main.name
-  location            = local.location
-  sku                 = "Basic"
-  admin_enabled       = false
-  tags                = local.tags
-}
-
-# --- Log Analytics ---
-resource "azurerm_log_analytics_workspace" "main" {
-  name                = "${local.project}-logs"
-  resource_group_name = azurerm_resource_group.main.name
-  location            = local.location
-  sku                 = "PerGB2018"
-  retention_in_days   = 30
-  tags                = local.tags
-}
-
-# --- Container Apps Environment ---
-resource "azurerm_container_app_environment" "main" {
-  name                       = "${local.project}-env"
-  resource_group_name        = azurerm_resource_group.main.name
-  location                   = local.location
-  log_analytics_workspace_id = azurerm_log_analytics_workspace.main.id
-  tags                       = local.tags
-}
-
-# --- Container App (notes-api) ---
-resource "azurerm_container_app" "api" {
-  name                         = "${local.project}-api"
-  container_app_environment_id = azurerm_container_app_environment.main.id
-  resource_group_name          = azurerm_resource_group.main.name
-  revision_mode                = "Single"
-  tags                         = local.tags
-
-  template {
-    container {
-      name   = "notes-api"
-      image  = "${azurerm_container_registry.main.login_server}/notes-api:latest"
-      cpu    = {{cpuLimit}}
-      memory = "{{memoryLimit}}"
-
-      env {
-        name  = "DB_NAME"
-        value = "notes"
-      }
-      env {
-        name  = "API_HOST"
-        value = "0.0.0.0"
-      }
-      env {
-        name  = "API_PORT"
-        value = "3100"
-      }
-      env {
-        name  = "DATABASE_SSL"
-        value = "true"
-      }
-    }
-
-    min_replicas = 0
-    max_replicas = 2
-  }
-
-  ingress {
-    external_enabled = true
-    target_port      = 3100
-    transport        = "auto"
-
-    traffic_weight {
-      percentage      = 100
-      latest_revision = true
-    }
-  }
-}
-
-# --- Storage Account (notes-app SPA) ---
-resource "azurerm_storage_account" "notes_app" {
-  name                     = replace("${local.project}${local.env}app", "-", "")
-  resource_group_name      = azurerm_resource_group.main.name
-  location                 = local.location
-  account_tier             = "Standard"
-  account_replication_type = "LRS"
-  tags                     = local.tags
-
-  static_website {
-    index_document     = "index.html"
-    error_404_document = "index.html"
-  }
-}
-
-# --- CDN (Front Door alternative — CDN Profile + Endpoint) ---
-resource "azurerm_cdn_profile" "main" {
-  name                = "${local.project}-cdn"
-  resource_group_name = azurerm_resource_group.main.name
-  location            = "global"
-  sku                 = "Standard_Microsoft"
-  tags                = local.tags
-}
-
-resource "azurerm_cdn_endpoint" "app" {
-  name                = "${local.project}-app"
-  profile_name        = azurerm_cdn_profile.main.name
-  resource_group_name = azurerm_resource_group.main.name
-  location            = "global"
-
-  origin {
-    name      = "spa"
-    host_name = azurerm_storage_account.notes_app.primary_web_host
-  }
-}

package/templates/terraform/azure/output.tf.hbs

@@ -1,19 +0,0 @@
-output "container_app_url" {
-  value = "https://${azurerm_container_app.api.latest_revision_fqdn}"
-}
-
-output "notes_app_url" {
-  value = azurerm_storage_account.notes_app.primary_web_endpoint
-}
-
-output "cdn_endpoint" {
-  value = azurerm_cdn_endpoint.app.fqdn
-}
-
-output "acr_login_server" {
-  value = azurerm_container_registry.main.login_server
-}
-
-output "db_host" {
-  value = azurerm_postgresql_flexible_server.main.fqdn
-}

package/templates/terraform/azure/provider.tf.hbs

@@ -1,19 +0,0 @@
-terraform {
-  required_version = ">= 1.5"
-
-  required_providers {
-    azurerm = {
-      source  = "hashicorp/azurerm"
-      version = "~> 3.80"
-    }
-    random = {
-      source  = "hashicorp/random"
-      version = "~> 3.0"
-    }
-  }
-}
-
-provider "azurerm" {
-  features {}
-  subscription_id = "{{subscriptionId}}"
-}

package/templates/terraform/gcp/backend.tf.hbs

@@ -1,6 +0,0 @@
-terraform {
-  backend "gcs" {
-    bucket = "godd-notes-tfstate-{{projectId}}"
-    prefix = "{{env}}/terraform.tfstate"
-  }
-}