ante-erp-cli 1.7.2 → 1.7.4

package/bin/ante-cli.js

@@ -212,6 +212,9 @@ program
   .option('--frontend <url>', 'Frontend domain/URL')
   .option('--api <url>', 'API domain/URL')
   .option('--detect', 'Auto-detect public IP address')
+  .option('--ssl, --enable-ssl', 'Enable SSL certificate (Let\'s Encrypt)')
+  .option('--email <email>', 'Email for SSL certificate notifications')
+  .option('--ssl-staging', 'Use Let\'s Encrypt staging environment (for testing)')
   .option('--no-interactive', 'Non-interactive mode')
   .action(setDomain);
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ante-erp-cli",
-  "version": "1.7.2",
+  "version": "1.7.4",
   "description": "Comprehensive CLI tool for managing ANTE ERP self-hosted installations",
   "type": "module",
   "bin": {

package/src/commands/set-domain.js

@@ -7,6 +7,7 @@ import { getInstallDir } from '../utils/config.js';
 import { detectPublicIPWithFeedback, buildURL, isValidIPv4 } from '../utils/network.js';
 import { configureNginx, requiresNginx } from '../utils/nginx.js';
 import { pullImages, stopServices, startServices, waitForServiceHealthy } from '../utils/docker.js';
+import { obtainSSLCertificate, updateNginxForSSL, setupAutoRenewal, extractDomain } from '../utils/ssl.js';
 
 /**
  * Validate URL format with proper hostname and protocol checking
@@ -42,6 +43,22 @@ function validateUrl(url) {
   }
 }
 
+/**
+ * Validate email format
+ * @param {string} email - Email to validate
+ * @returns {boolean|string} True if valid, error message if invalid
+ */
+function validateEmail(email) {
+  const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+  if (!email || email.trim() === '') {
+    return 'Email is required';
+  }
+  if (!emailRegex.test(email)) {
+    return 'Please enter a valid email address';
+  }
+  return true;
+}
+
 /**
  * Sanitize URL by normalizing common formatting issues
  * @param {string} url - URL to sanitize
@@ -279,7 +296,8 @@ export async function setDomain(options) {
     console.log(chalk.green('✓ Configuration updated'));
 
     // Configure NGINX if needed (for domains or HTTPS)
-    if (requiresNginx(frontendUrl, apiUrl)) {
+    const needsNginx = requiresNginx(frontendUrl, apiUrl);
+    if (needsNginx) {
       console.log(chalk.gray('\n🔧 Setting up reverse proxy...\n'));
 
       try {
@@ -295,6 +313,109 @@ export async function setDomain(options) {
       }
     }
 
+    // Check if HTTPS is configured and offer SSL setup
+    const isHttps = frontendUrl.startsWith('https://') || apiUrl.startsWith('https://');
+    const frontendDomain = extractDomain(frontendUrl);
+    const apiDomain = extractDomain(apiUrl);
+    const isDomainName = !frontendDomain.match(/^(\d+\.){3}\d+$/) && frontendDomain !== 'localhost';
+
+    if (isHttps && isDomainName && needsNginx) {
+      // SSL setup workflow
+      let enableSsl = options.ssl || false;
+      let sslEmail = options.email || '';
+
+      // If not specified via flags, ask in interactive mode
+      if (options.interactive !== false && !options.ssl) {
+        console.log(chalk.cyan('\n🔒 SSL/HTTPS Configuration\n'));
+        console.log(chalk.gray('You\'re using HTTPS URLs. Would you like to obtain SSL certificates now?\n'));
+        console.log(chalk.gray('This will:'));
+        console.log(chalk.gray('  • Obtain free SSL certificates from Let\'s Encrypt'));
+        console.log(chalk.gray('  • Configure NGINX for HTTPS'));
+        console.log(chalk.gray('  • Set up automatic certificate renewal\n'));
+
+        const sslPrompt = await inquirer.prompt([
+          {
+            type: 'confirm',
+            name: 'enable',
+            message: 'Enable SSL certificate now?',
+            default: true
+          }
+        ]);
+
+        enableSsl = sslPrompt.enable;
+
+        if (enableSsl) {
+          const emailPrompt = await inquirer.prompt([
+            {
+              type: 'input',
+              name: 'email',
+              message: 'Email address for certificate notifications:',
+              validate: validateEmail
+            }
+          ]);
+          sslEmail = emailPrompt.email;
+        }
+      }
+
+      // Execute SSL setup if enabled
+      if (enableSsl) {
+        if (!sslEmail) {
+          console.log(chalk.yellow('\n⚠  SSL setup skipped: Email address required'));
+          console.log(chalk.gray('   Run "ante ssl enable --email your@email.com" to enable SSL later\n'));
+        } else {
+          try {
+            console.log(chalk.bold('\n🔒 Setting up SSL/HTTPS...\n'));
+
+            // Step 1: Obtain certificates
+            console.log(chalk.cyan('📋 Obtaining SSL certificates...\n'));
+
+            const domains = [];
+            if (frontendDomain !== 'localhost' && !frontendDomain.match(/^\d+\.\d+\.\d+\.\d+$/)) {
+              domains.push(frontendDomain);
+            }
+            if (apiDomain !== frontendDomain && apiDomain !== 'localhost' && !apiDomain.match(/^\d+\.\d+\.\d+\.\d+$/)) {
+              domains.push(apiDomain);
+            }
+
+            for (const domain of domains) {
+              console.log(chalk.gray(`   Obtaining certificate for ${domain}...`));
+              await obtainSSLCertificate({
+                domain,
+                email: sslEmail,
+                staging: options.sslStaging || false
+              });
+            }
+
+            console.log(chalk.green('\n✓ SSL certificates obtained\n'));
+
+            // Step 2: Update NGINX for HTTPS
+            console.log(chalk.cyan('🔧 Configuring NGINX for HTTPS...\n'));
+
+            await updateNginxForSSL({
+              frontendDomain: frontendUrl,
+              apiDomain: apiUrl,
+              frontendPort: 8080,
+              apiPort: 3001
+            });
+
+            // Step 3: Setup auto-renewal
+            console.log(chalk.cyan('🔄 Setting up automatic certificate renewal...\n'));
+            await setupAutoRenewal();
+
+            console.log(chalk.green('✓ SSL/HTTPS configured successfully\n'));
+
+          } catch (error) {
+            console.log(chalk.red('\n✗ SSL setup failed:'), error.message);
+            console.log(chalk.yellow('\n⚠  You can enable SSL later with:'));
+            console.log(chalk.gray(`   ante ssl enable --email ${sslEmail}\n`));
+          }
+        }
+      } else if (options.interactive !== false) {
+        console.log(chalk.gray('\nSSL setup skipped. You can enable it later with:'));
+        console.log(chalk.gray('   ante ssl enable --email your@email.com\n'));
+      }
+    }
+
     // Restart containers to apply new environment variables
     console.log(chalk.gray('\n🔄 Restarting services with updated configuration...\n'));