@underpostnet/underpost 2.8.1 → 2.8.5

package/conf.js

@@ -1,4 +1,8 @@
-const DefaultConf = {
+import dotenv from 'dotenv';
+
+dotenv.config();
+
+const DefaultConf = /**/ {
   client: {
     default: {
       metadata: {
@@ -75,58 +79,16 @@ const DefaultConf = {
         ],
       },
       views: [
-        {
-          path: '/',
-          title: 'Home',
-          client: 'Default',
-          ssr: 'Default',
-        },
-        {
-          path: '/home',
-          title: 'Home',
-          client: 'Default',
-          ssr: 'Default',
-        },
-        {
-          path: '/settings',
-          client: 'Default',
-          ssr: 'Default',
-        },
-        {
-          path: '/log-in',
-          client: 'Default',
-          ssr: 'Default',
-        },
-        {
-          path: '/sign-up',
-          client: 'Default',
-          ssr: 'Default',
-        },
-        {
-          path: '/log-out',
-          client: 'Default',
-          ssr: 'Default',
-        },
-        {
-          path: '/account',
-          client: 'Default',
-          ssr: 'Default',
-        },
-        {
-          path: '/docs',
-          client: 'Default',
-          ssr: 'Default',
-        },
-        {
-          path: '/recover',
-          client: 'Default',
-          ssr: 'Default',
-        },
-        {
-          path: '/default-management',
-          client: 'Default',
-          ssr: 'Default',
-        },
+        { path: '/', title: 'Home', client: 'Default', ssr: 'Default' },
+        { path: '/home', title: 'Home', client: 'Default', ssr: 'Default' },
+        { path: '/settings', client: 'Default', ssr: 'Default' },
+        { path: '/log-in', client: 'Default', ssr: 'Default' },
+        { path: '/sign-up', client: 'Default', ssr: 'Default' },
+        { path: '/log-out', client: 'Default', ssr: 'Default' },
+        { path: '/account', client: 'Default', ssr: 'Default' },
+        { path: '/docs', client: 'Default', ssr: 'Default' },
+        { path: '/recover', client: 'Default', ssr: 'Default' },
+        { path: '/default-management', client: 'Default', ssr: 'Default' },
         { client: 'Default', ssr: 'Default', path: '/404', title: '404 Not Found' },
         { client: 'Default', ssr: 'Default', path: '/500', title: '500 Server Error' },
       ],
@@ -137,24 +99,15 @@ const DefaultConf = {
           import_name: '@neodrag/vanilla',
           import_name_build: '/dist/@neodrag-vanilla/index.js',
         },
-        {
-          folder: './node_modules/@fortawesome/fontawesome-free',
-          public_folder: '/dist/fontawesome',
-        },
+        { folder: './node_modules/@fortawesome/fontawesome-free', public_folder: '/dist/fontawesome' },
         {
           folder: './node_modules/sortablejs/modular',
           public_folder: '/dist/sortablejs',
           import_name: 'sortablejs',
           import_name_build: '/dist/sortablejs/sortable.complete.esm.js',
         },
-        {
-          folder: './node_modules/validator',
-          public_folder: '/dist/validator',
-        },
-        {
-          folder: './node_modules/@loadingio/css-spinner/entries',
-          public_folder: '/dist/loadingio',
-        },
+        { folder: './node_modules/validator', public_folder: '/dist/validator' },
+        { folder: './node_modules/@loadingio/css-spinner/entries', public_folder: '/dist/loadingio' },
         {
           import_name: 'ag-grid-community',
           import_name_build: '/dist/ag-grid-community/ag-grid-community.auto.complete.esm.min.js',
@@ -169,10 +122,7 @@ const DefaultConf = {
           import_name: 'socket.io/client-dist/socket.io.esm.min.js',
           import_name_build: '/dist/socket.io/socket.io.esm.min.js',
         },
-        {
-          folder: './node_modules/peerjs/dist',
-          public_folder: '/dist/peerjs',
-        },
+        { folder: './node_modules/peerjs/dist', public_folder: '/dist/peerjs' },
       ],
       services: ['default', 'core', 'user', 'test', 'file'],
     },
@@ -181,35 +131,12 @@ const DefaultConf = {
     Default: {
       head: ['Seo', 'Pwa', 'Css', 'DefaultScripts', 'Production'],
       body: ['CacheControl', 'DefaultSplashScreen', '404', '500'],
-      mailer: {
-        userVerifyEmail: 'DefaultVerifyEmail',
-        userRecoverEmail: 'DefaultRecoverEmail',
-      },
+      mailer: { userVerifyEmail: 'DefaultVerifyEmail', userRecoverEmail: 'DefaultRecoverEmail' },
       offline: [
-        {
-          path: '/offline',
-          title: 'No Network Connection',
-          client: 'NoNetworkConnection',
-          head: [],
-          body: [],
-        },
-        {
-          path: '/maintenance',
-          title: 'Server Maintenance',
-          client: 'Maintenance',
-          head: [],
-          body: [],
-        },
-      ],
-      pages: [
-        {
-          path: '/test',
-          title: 'Test',
-          client: 'Test',
-          head: [],
-          body: [],
-        },
+        { path: '/offline', title: 'No Network Connection', client: 'NoNetworkConnection', head: [], body: [] },
+        { path: '/maintenance', title: 'Server Maintenance', client: 'Maintenance', head: [], body: [] },
       ],
+      pages: [{ path: '/test', title: 'Test', client: 'Test', head: [], body: [] }],
     },
   },
   server: {
@@ -227,24 +154,14 @@ const DefaultConf = {
         ws: 'core',
         peer: true,
         proxy: [80, 443],
-        db: {
-          provider: 'mongoose',
-          host: 'mongodb://127.0.0.1:27017',
-          name: 'default',
-        },
+        db: { provider: 'mongoose', host: 'mongodb://127.0.0.1:27017', name: 'default' },
         mailer: {
-          sender: {
-            email: 'noreply@default.net',
-            name: 'Default',
-          },
+          sender: { email: 'noreply@default.net', name: 'Default' },
           transport: {
             host: 'smtp.default.com',
             port: 465,
             secure: true,
-            auth: {
-              user: 'noreply@default.net',
-              pass: '',
-            },
+            auth: { user: 'noreply@default.net', pass: '' },
           },
         },
       },
@@ -262,35 +179,11 @@ const DefaultConf = {
     },
   },
   cron: {
-    ipDaemon: {
-      ip: null,
-    },
-    records: {
-      A: [
-        {
-          host: 'example.com',
-          dns: 'dondominio',
-          api_key: '???',
-          user: '???',
-        },
-      ],
-    },
-    backups: [
-      {
-        deployGroupId: 'default-group',
-      },
-    ],
-    jobs: {
-      dns: {
-        expression: '* * * * *',
-        enabled: true,
-      },
-      backups: {
-        expression: '0 1 * * *',
-        enabled: true,
-      },
-    },
+    ipDaemon: { ip: null },
+    records: { A: [{ host: 'example.com', dns: 'dondominio', api_key: '???', user: '???' }] },
+    backups: [{ deployGroupId: 'default-group' }],
+    jobs: { dns: { expression: '* * * * *', enabled: true }, backups: { expression: '0 1 * * *', enabled: true } },
   },
-};
+}; /**/
 
 export { DefaultConf };

package/docker-compose.yml

@@ -58,7 +58,7 @@ services:
           cpus: '0.25'
           memory: 20M
     labels: # labels in Compose file instead of Dockerfile
-      engine.version: '2.8.1'
+      engine.version: '2.8.5'
     networks:
       - load-balancer
 

package/manifests/core/kustomization.yaml

@@ -0,0 +1,11 @@
+---
+# kubectl apply -k core/.
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - underpost-engine-pv-pvc.yaml
+  - underpost-engine-headless-service.yaml
+  - underpost-engine-statefulset.yaml
+  - underpost-engine-backup-pv-pvc.yaml
+  - underpost-engine-mongodb-backup-cronjob.yaml
+  - underpost-engine-backup-access.yaml

package/manifests/core/underpost-engine-backup-access.yaml

@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: backup-access
+spec:
+  containers:
+    - name: busybox
+      image: busybox
+      command: ['sh', '-c', 'sleep 3600']
+      volumeMounts:
+        - name: backup-storage
+          mountPath: /backup
+  volumes:
+    - name: backup-storage
+      persistentVolumeClaim:
+        claimName: backup-pvc

package/manifests/core/underpost-engine-backup-pv-pvc.yaml

@@ -0,0 +1,22 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: backup-pv
+spec:
+  capacity:
+    storage: 5Gi
+  accessModes:
+    - ReadWriteOnce
+  hostPath:
+    path: /mnt/backup
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: backup-pvc
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 5Gi

package/manifests/core/underpost-engine-headless-service.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: mongodb-service
+spec:
+  clusterIP: None
+  selector:
+    app: mongodb
+  ports:
+    - port: 27017

package/manifests/core/underpost-engine-mongodb-backup-cronjob.yaml

@@ -0,0 +1,40 @@
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: mongodb-backup
+spec:
+  schedule: '*/5 * * * *' # Runs backup every five minutes
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          containers:
+            - name: mongodump
+              image: docker.io/library/mongo:latest
+              command:
+                - sh
+                - -c
+                - |
+                  # Perform backup
+                  mongodump -u $MONGO_INITDB_ROOT_USERNAME -p $MONGO_INITDB_ROOT_PASSWORD --host=mongodb-service --port=27017 --out=/backup/$(date +\%Y-\%m-\%dT\%H-\%M-\%S)
+                  # Remove backups older than 7 days
+                  find /backup -type d -mtime +7 -exec rm -rf {} +
+              volumeMounts:
+                - name: backup-storage
+                  mountPath: /backup
+              env:
+                - name: MONGO_INITDB_ROOT_USERNAME
+                  valueFrom:
+                    secretKeyRef:
+                      name: mongodb-secret
+                      key: username
+                - name: MONGO_INITDB_ROOT_PASSWORD
+                  valueFrom:
+                    secretKeyRef:
+                      name: mongodb-secret
+                      key: password
+          restartPolicy: Never
+          volumes:
+            - name: backup-storage
+              persistentVolumeClaim:
+                claimName: backup-pvc

package/manifests/core/underpost-engine-mongodb-configmap.yaml

@@ -0,0 +1,26 @@
+# origin conf: /etc/mongod.conf
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: mongodb-config-file
+  namespace: default
+data:
+  mongod.conf: |
+    storage:
+      dbPath: /data/db
+    systemLog:
+      destination: file
+      logAppend: true
+      path: /var/log/mongodb/mongod.log
+    replication:
+      replSetName: rs0
+    net:
+      bindIp: 127.0.0.1
+      port: 27017
+    processManagement:
+      fork: true
+    setParameter:
+      enableLocalhostAuthBypass: false
+    security:
+      authorization: enabled
+      keyFile: /etc/mongodb-keyfile

package/manifests/core/underpost-engine-pv-pvc.yaml

@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: mongodb-pv
+spec:
+  capacity:
+    storage: 5Gi
+  accessModes:
+    - ReadWriteOnce
+  hostPath:
+    path: /data/mongodb
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: mongodb-pvc
+spec:
+  storageClassName: ''
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 5Gi

package/manifests/core/underpost-engine-statefulset.yaml

@@ -0,0 +1,91 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: mongodb # Specifies the name of the statefulset
+spec:
+  serviceName: 'mongodb-service' # Specifies the service to use
+  replicas: 2
+  selector:
+    matchLabels:
+      app: mongodb
+  template:
+    metadata:
+      labels:
+        app: mongodb
+    spec:
+      containers:
+        - name: mongodb
+          image: docker.io/library/mongo:latest
+          command:
+            - mongod
+            - '--replSet'
+            - 'rs0'
+            # - '--config'
+            # - '-f'
+            # - '/etc/mongod.conf'
+            # - '--auth'
+            # - '--clusterAuthMode'
+            # - 'keyFile'
+            # - '--keyFile'
+            # - '/etc/mongodb-keyfile'
+            # - '--interleave'
+            # - 'all'
+            # - '--wiredTigerCacheSizeGB'
+            # - '0.25'
+            # - '--setParameter'
+            # - 'authenticationMechanisms=SCRAM-SHA-1'
+            # - '--fork'
+            - '--logpath'
+            - '/var/log/mongodb/mongod.log'
+            - '--bind_ip_all'
+          ports:
+            - containerPort: 27017
+          volumeMounts:
+            - name: mongodb-storage
+              mountPath: /data/db
+            - name: keyfile
+              mountPath: /etc/mongodb-keyfile
+              readOnly: true
+            # - name: mongodb-configuration-file
+            #   mountPath: /etc/mongod.conf
+            #   subPath: mongod.conf
+            #   readOnly: true
+            # - name: mongodb-config
+            #   mountPath: /config
+          env:
+            - name: MONGO_INITDB_ROOT_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  name: mongodb-secret
+                  key: username
+            - name: MONGO_INITDB_ROOT_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: mongodb-secret
+                  key: password
+          resources:
+            requests:
+              cpu: '100m'
+              memory: '256Mi'
+            limits:
+              cpu: '500m'
+              memory: '512Mi'
+      volumes:
+        - name: keyfile
+          secret:
+            secretName: mongodb-keyfile
+            defaultMode: 0400
+        # - name: mongodb-configuration-file
+        #   configMap:
+        #     name: mongodb-config-file
+        # - name: mongodb-config
+        #   configMap:
+        #     name: mongodb-config
+  volumeClaimTemplates:
+    - metadata:
+        name: mongodb-storage
+      spec:
+        accessModes: ['ReadWriteOnce']
+        resources:
+          requests:
+            storage: 5Gi

package/manifests/deployment/mongo-express/deployment.yaml

@@ -0,0 +1,60 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: mongo-express
+  labels:
+    app: mongo-express
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: mongo-express
+  template:
+    metadata:
+      labels:
+        app: mongo-express
+    spec:
+      containers:
+        - name: mongo-express
+          image: mongo-express
+          ports:
+            - containerPort: 8081
+          env:
+            - name: ME_CONFIG_MONGODB_ADMINUSERNAME
+              valueFrom:
+                secretKeyRef:
+                  name: mongodb-secret
+                  key: username
+            - name: ME_CONFIG_MONGODB_ADMINPASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: mongodb-secret
+                  key: password
+            - name: ME_CONFIG_BASICAUTH_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  name: mongodb-secret
+                  key: username
+            - name: ME_CONFIG_BASICAUTH_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: mongodb-secret
+                  key: password
+            - name: ME_CONFIG_MONGODB_SERVER
+              value: 'mongodb-0.mongodb-service'
+            - name: ME_CONFIG_MONGODB_ENABLE_ADMIN
+              value: 'true'
+            - name: ME_CONFIG_MONGODB_PORT
+              value: '27017'
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: mongo-express-service
+spec:
+  selector:
+    app: mongo-express
+  ports:
+    - protocol: TCP
+      port: 8081
+      targetPort: 8081

package/manifests/deployment/phpmyadmin/deployment.yaml

@@ -0,0 +1,54 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: phpmyadmin-deployment
+  labels:
+    app: phpmyadmin
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: phpmyadmin
+  template:
+    metadata:
+      labels:
+        app: phpmyadmin
+    spec:
+      containers:
+        - name: phpmyadmin
+          image: phpmyadmin/phpmyadmin
+          ports:
+            - containerPort: 80
+          env:
+            - name: PMA_HOST
+              value: 'mariadb'
+            - name: PMA_PORT
+              value: '3306'
+            - name: PMA_USER
+              valueFrom:
+                secretKeyRef:
+                  name: mariadb-secret
+                  key: username
+            - name: PMA_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: mariadb-secret
+                  key: password
+            - name: UPLOAD_LIMIT
+              value: '300M'
+            - name: PMA_ARBITRARY
+              value: '1'
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: phpmyadmin-service
+spec:
+  type: NodePort
+  selector:
+    app: phpmyadmin
+  ports:
+    - protocol: TCP
+      nodePort: 31008
+      port: 80
+      targetPort: 80

package/manifests/kind-config.yaml

@@ -0,0 +1,12 @@
+kind: Cluster
+apiVersion: kind.x-k8s.io/v1alpha4
+nodes:
+  - role: control-plane
+  - role: worker
+    extraPortMappings:
+      - containerPort: 80
+        hostPort: 80
+        listenAddress: '0.0.0.0'
+      - containerPort: 443
+        hostPort: 443
+        listenAddress: '0.0.0.0'

package/manifests/letsencrypt-prod.yaml

@@ -0,0 +1,15 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-prod
+  namespace: cert-manager
+spec:
+  acme:
+    email: development@underpost.net
+    privateKeySecretRef:
+      name: letsencrypt-prod
+    server: https://acme-v02.api.letsencrypt.org/directory
+    solvers:
+      - http01:
+          ingress:
+            class: contour

package/manifests/mariadb/config.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: mariadb-config
+data:
+  my.cnf: | # bind-address=0.0.0.0
+    [mysqld]
+    default_storage_engine=InnoDB
+    innodb_file_per_table=1
+    max_connections=1000

package/manifests/mariadb/kustomization.yaml

@@ -0,0 +1,9 @@
+---
+# kubectl apply -k mariadb/.
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - pv.yaml
+  - pvc.yaml
+  - statefulset.yaml
+  - service.yaml

package/manifests/mariadb/pv.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: mariadb-pv
+spec:
+  capacity:
+    storage: 1Gi
+  volumeMode: Filesystem
+  accessModes:
+    - ReadWriteOnce
+  hostPath:
+    path: /data/mariadb

package/manifests/mariadb/pvc.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: mariadb-pvc
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 1Gi

package/manifests/mariadb/secret.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: mariadb-secret
+type: Opaque
+data:
+  password:
+  username: