cyberia 2.8.885

package/manifests/prometheus/deployment.yaml

@@ -0,0 +1,82 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: prometheus-config
+  labels:
+    app: prometheus
+data:
+  prometheus.yml: |
+    global:
+      scrape_interval: 30s
+      evaluation_interval: 30s
+
+    scrape_configs:
+      - job_name: 'scraper'
+        metrics_path: /metrics
+        scheme: https
+        static_configs:
+          - targets: []
+        # tls_config:
+        #   insecure_skip_verify: true
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: prometheus
+  labels:
+    app: prometheus
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: prometheus
+  template:
+    metadata:
+      labels:
+        app: prometheus
+    spec:
+      containers:
+        - name: prometheus
+          image: prom/prometheus:latest
+          args:
+            - '--config.file=/etc/prometheus/prometheus.yml'
+            - '--storage.tsdb.path=/prometheus'
+            - '--web.console.libraries=/usr/share/prometheus/console_libraries'
+            - '--web.console.templates=/usr/share/prometheus/consoles'
+          ports:
+            - containerPort: 9090
+              name: web
+          volumeMounts:
+            - name: prometheus-config
+              mountPath: /etc/prometheus/
+            - name: prometheus-data
+              mountPath: /prometheus
+          resources:
+            requests:
+              memory: '200Mi'
+              cpu: '100m'
+      volumes:
+        - name: prometheus-config
+          configMap:
+            name: prometheus-config
+        - name: prometheus-data
+          emptyDir: {}
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: prometheus
+  labels:
+    app: prometheus
+spec:
+  ports:
+    - port: 9090
+      targetPort: 9090
+      protocol: TCP
+      name: web
+  selector:
+    app: prometheus
+  type: ClusterIP

package/manifests/valkey/kustomization.yaml

@@ -0,0 +1,7 @@
+---
+# kubectl apply -k valkey/.
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - service.yaml
+  - statefulset.yaml

package/manifests/valkey/service.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: valkey-service
+  namespace: default
+spec:
+  selector:
+    app: valkey-service
+  ports:
+    - port: 6379
+      targetPort: 6379

package/manifests/valkey/statefulset.yaml

@@ -0,0 +1,38 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: valkey-service
+  namespace: default
+spec:
+  serviceName: valkey-service
+  replicas: 1
+  selector:
+    matchLabels:
+      app: valkey-service
+  template:
+    metadata:
+      labels:
+        app: valkey-service
+    spec:
+      automountServiceAccountToken: false
+      containers:
+        - name: valkey-service
+          image: docker.io/valkey/valkey:latest
+          imagePullPolicy: IfNotPresent
+          command: ["valkey-server"]
+          args: ["--port", "6379"]
+          ports:
+            - containerPort: 6379
+          startupProbe:
+            tcpSocket:
+              port: 6379
+            periodSeconds: 5
+            timeoutSeconds: 5
+            failureThreshold: 30
+          livenessProbe:
+            tcpSocket:
+              port: 6379
+            initialDelaySeconds: 10
+            periodSeconds: 30
+            timeoutSeconds: 5
+            failureThreshold: 2

package/nodemon.json

@@ -0,0 +1,6 @@
+{
+  "watch": ["./src"],
+  "ext": "js",
+  "delay": 0,
+  "ignore": []
+}

package/package.json

@@ -0,0 +1,118 @@
+{
+    "type": "module",
+    "main": "src/index.js",
+    "name": "cyberia",
+    "version": "2.8.885",
+    "description": "pwa api rest template",
+    "scripts": {
+        "start": "env-cmd -f .env.production node --max-old-space-size=8192 src/server",
+        "build": "node bin/deploy build-full-client",
+        "test": "env-cmd -f .env.test c8 mocha",
+        "pm2": "env-cmd -f .env.production pm2 start src/server.js --node-args=\"--max-old-space-size=8192\" --name engine -- dd-default",
+        "dev": "env-cmd -f .env.development nodemon src/server",
+        "dev-img": "env-cmd -f .env.development node src/server",
+        "prod-img": "env-cmd -f .env.production node src/server",
+        "monitor": "pm2 start src/monitor.js --name monitor -- dd production",
+        "dev-api": "env-cmd -f .env.development nodemon --watch src --ignore src/client src/api",
+        "dev-client": "env-cmd -f .env.development node src/client.dev",
+        "proxy": "node src/proxy proxy",
+        "docs": "jsdoc -c jsdoc.json",
+        "install-global": "npm install -g pm2 && npm install -g jsdoc && npm install -g prettier && npm install -g env-cmd && npm install -g yarn && npm install -g auto-changelog",
+        "install-test": "npm install -g mocha && npm install -g c8 && npm install -g nyc && npm install -g coveralls",
+        "install-underpost": "cp -a $(npm root -g)/underpost/node_modules ./node_modules && npm install --only=dev --ignore-scripts",
+        "install": "npm run install-global && npm run install-test",
+        "prettier": "prettier --write .",
+        "fix": "npm audit fix --force && npm audit",
+        "changelog": "auto-changelog"
+    },
+    "bin": {
+        "cyberia": "bin/index.js"
+    },
+    "repository": {
+        "type": "git",
+        "url": "git+https://github.com/underpostnet/engine-cyberia.git"
+    },
+    "keywords": [
+        "pwa",
+        "microservices",
+        "template",
+        "builder",
+        "engine",
+        "server",
+        "proxy",
+        "client"
+    ],
+    "author": "https://github.com/underpostnet",
+    "license": "MIT",
+    "bugs": {
+        "url": "https://github.com/underpostnet/engine-cyberia/issues"
+    },
+    "homepage": "https://github.com/underpostnet/engine-cyberia#readme",
+    "dependencies": {
+        "@fortawesome/fontawesome-free": "^6.4.2",
+        "@fullcalendar/rrule": "^6.1.15",
+        "@neodrag/vanilla": "^2.0.3",
+        "adm-zip": "^0.5.10",
+        "ag-grid-community": "^31.3.4",
+        "axios": "^1.5.1",
+        "chai": "^5.1.0",
+        "clean-jsdoc-theme": "^4.3.0",
+        "clipboardy": "^4.0.0",
+        "cloudinary": "^2.5.1",
+        "colors": "^1.4.0",
+        "commander": "^12.1.0",
+        "compression": "^1.7.4",
+        "cookie-parser": "^1.4.7",
+        "cors": "^2.8.5",
+        "d3": "^7.9.0",
+        "dotenv": "^16.3.1",
+        "easymde": "^2.18.0",
+        "env-cmd": "^10.1.0",
+        "express": "^4.18.2",
+        "express-fileupload": "^1.4.3",
+        "express-rate-limit": "^8.1.0",
+        "express-slow-down": "^3.0.0",
+        "favicons": "^7.2.0",
+        "fs-extra": "^11.1.1",
+        "fullcalendar": "^6.1.15",
+        "helmet": "^8.1.0",
+        "html-minifier-terser": "^7.2.0",
+        "http-proxy-middleware": "^2.0.6",
+        "ignore-walk": "^6.0.4",
+        "iovalkey": "^0.2.1",
+        "jimp": "^1.6.0",
+        "json-colorizer": "^2.2.2",
+        "jsonwebtoken": "^9.0.2",
+        "mariadb": "^3.2.2",
+        "marked": "^12.0.2",
+        "mocha": "^10.8.2",
+        "mongoose": "^8.9.5",
+        "morgan": "^1.10.0",
+        "nodemailer": "^7.0.9",
+        "nodemon": "^3.0.1",
+        "peer": "^1.0.2",
+        "peerjs": "^1.5.2",
+        "prom-client": "^15.1.2",
+        "public-ip": "^6.0.1",
+        "read": "^2.1.0",
+        "rrule": "^2.8.1",
+        "sharp": "^0.32.5",
+        "shelljs": "^0.8.5",
+        "sitemap": "^7.1.1",
+        "socket.io": "^4.8.0",
+        "sortablejs": "^1.15.0",
+        "split-file": "^2.3.0",
+        "swagger-autogen": "^2.23.7",
+        "swagger-ui-express": "^5.0.0",
+        "systeminformation": "^5.23.7",
+        "uglify-js": "^3.17.4",
+        "validator": "^13.11.0",
+        "vanilla-jsoneditor": "^2.3.2",
+        "winston": "^3.11.0"
+    },
+    "publishConfig": {
+        "provenance": true,
+        "access": "public",
+        "registry": "https://registry.npmjs.org/"
+    }
+}

package/proxy.yaml

@@ -0,0 +1,35 @@
+
+---
+apiVersion: projectcontour.io/v1
+kind: HTTPProxy
+metadata:
+  name: www.cyberiaonline.com
+spec:
+  virtualhost:
+    fqdn: www.cyberiaonline.com
+  routes:
+    - conditions:
+        - prefix: /
+      enableWebsockets: true
+      services:
+        - name: dd-cyberia-development-blue-service
+          port: 4005
+          weight: 100
+    
+---
+apiVersion: projectcontour.io/v1
+kind: HTTPProxy
+metadata:
+  name: cyberiaonline.com
+spec:
+  virtualhost:
+    fqdn: cyberiaonline.com
+  routes:
+    - conditions:
+        - prefix: /
+      enableWebsockets: true
+      services:
+        - name: dd-cyberia-development-blue-service
+          port: 4006
+          weight: 100
+    

package/scripts/device-scan.sh

@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+
+for iface_path in /sys/class/net/*; do
+  name=$(basename "$iface_path")
+  mac=$(< "$iface_path/address")
+  ip=$(ip -4 addr show dev "$name" \
+       | grep -oP '(?<=inet\s)\d+(\.\d+){3}' || echo "—")
+  operstate=$(< "$iface_path/operstate")
+  mtu=$(< "$iface_path/mtu")
+
+  # Driver
+  if [ -L "$iface_path/device/driver" ]; then
+    driver=$(basename "$(readlink -f "$iface_path/device/driver")")
+  else
+    driver="—"
+  fi
+
+  # Vendor device ID PCI
+  pci_dev="$iface_path/device"
+  if [ -f "$pci_dev/vendor" ] && [ -f "$pci_dev/device" ]; then
+    vendor_id=$(< "$pci_dev/vendor")
+    device_id=$(< "$pci_dev/device")
+    # parse 0x8086 to 8086, etc.
+    vendor_id=${vendor_id#0x}
+    device_id=${device_id#0x}
+    pci="${vendor_id}:${device_id}"
+  else
+    pci="—"
+  fi
+
+  # Link Speed
+  speed=$(cat "$iface_path/speed" 2>/dev/null || echo "—")
+
+  echo "Interface: $name"
+  echo "  MAC:          $mac"
+  echo "  IPv4:         $ip"
+  echo "  State:       $operstate"
+  echo "  MTU:          $mtu"
+  echo "  Driver:       $driver"
+  echo "  PCI Vendor:Device ID: $pci"
+  echo "  Link Speed:   ${speed}Mb/s"
+  echo
+done

package/scripts/gpu-diag.sh

@@ -0,0 +1,19 @@
+# GPUs and drivers in use
+sudo lspci -nnk | egrep -i 'vga|3d' -A3
+
+# modules loaded relevant
+lsmod | egrep 'nvidia|nouveau|amdgpu' || true
+
+# if exists nvidia tool
+nvidia-smi 2>/dev/null || echo "nvidia-smi not found"
+
+# kernel related errors
+sudo dmesg | egrep -i 'nvidia|nouveau|amdgpu' --color=auto
+
+# recent system errors / gdm / mutter / X
+sudo journalctl -b -p err --no-pager | head -n 200
+journalctl -b _COMM=gdm --no-pager | tail -n 200
+journalctl -b _COMM=Xorg --no-pager | tail -n 200
+
+# X log (if exists)
+sudo grep -E "(EE|WW|NVIDIA|nouveau|amdgpu)" /var/log/Xorg.0.log || true

package/scripts/maas-setup.sh

@@ -0,0 +1,120 @@
+#!/bin/bash
+set -euo pipefail
+
+# Install jq for JSON parsing
+sudo snap install jq
+
+# Install MAAS
+sudo snap install maas
+
+# Get default interface and IP address
+INTERFACE=$(ip route | grep default | awk '{print $5}')
+IP_ADDRESS=$(ip -4 addr show dev "$INTERFACE" | grep -oP '(?<=inet\s)\d+(\.\d+){3}')
+
+# Change to the engine directory (assuming this is where your MAAS related configs are)
+cd /home/dd/engine
+
+# Load secrets for MAAS database and admin credentials
+underpost secret underpost --create-from-file /home/dd/engine/engine-private/conf/dd-cron/.env.production
+
+# Extract configuration values from secrets
+DB_PG_MAAS_USER=$(node bin config get --plain DB_PG_MAAS_USER)
+DB_PG_MAAS_PASS=$(node bin config get --plain DB_PG_MAAS_PASS)
+DB_PG_MAAS_HOST=$(node bin config get --plain DB_PG_MAAS_HOST)
+DB_PG_MAAS_NAME=$(node bin config get --plain DB_PG_MAAS_NAME)
+
+MAAS_ADMIN_USERNAME=$(node bin config get --plain MAAS_ADMIN_USERNAME)
+MAAS_ADMIN_EMAIL=$(node bin config get --plain MAAS_ADMIN_EMAIL)
+MAAS_ADMIN_PASS=$(node bin config get --plain MAAS_ADMIN_PASS)
+
+# Initialize MAAS region+rack controller
+maas init region+rack \
+    --database-uri "postgres://${DB_PG_MAAS_USER}:${DB_PG_MAAS_PASS}@${DB_PG_MAAS_HOST}/${DB_PG_MAAS_NAME}" \
+    --maas-url http://${IP_ADDRESS}:5240/MAAS
+
+# Allow MAAS to initialize (wait for services to come up)
+echo "Waiting for MAAS to initialize..."
+sleep 30
+
+# Create MAAS administrator account
+maas createadmin \
+    --username "$MAAS_ADMIN_USERNAME" \
+    --password "$MAAS_ADMIN_PASS" \
+    --email "$MAAS_ADMIN_EMAIL"
+
+# Get the API key for the admin user
+APIKEY=$(maas apikey --username "$MAAS_ADMIN_USERNAME")
+
+# Login to MAAS using the admin profile
+echo "Logging into MAAS..."
+maas login "$MAAS_ADMIN_USERNAME" "http://localhost:5240/MAAS/" "$APIKEY"
+
+# Set upstream DNS for MAAS
+echo "Setting upstream DNS to 8.8.8.8..."
+maas "$MAAS_ADMIN_USERNAME" maas set-config name=upstream_dns value=8.8.8.8
+
+# echo "Downloading Ubuntu Noble amd64/ga-24.04 image..."
+# maas $MAAS_ADMIN_USERNAME boot-source-selections create 1 \
+#     os="ubuntu" release="noble" arches="amd64" \
+#     subarches="ga-24.04" labels="*"
+
+# echo "Downloading Ubuntu Noble arm64/ga-24.04 image..."
+# maas $MAAS_ADMIN_USERNAME boot-source-selections create 1 \
+#     os="ubuntu" release="noble" arches="arm64" \
+#     subarches="ga-24.04" labels="*"
+
+# Import the newly selected boot images
+# echo "Importing boot images (this may take some time)..."
+# maas "$MAAS_ADMIN_USERNAME" boot-resources import
+
+# Disable the MAAS HTTP proxy
+echo "Disabling MAAS HTTP proxy..."
+maas "$MAAS_ADMIN_USERNAME" maas set-config name=enable_http_proxy value=false
+
+# Disable DNSSEC validation
+echo "Disabling DNSSEC validation..."
+maas "$MAAS_ADMIN_USERNAME" maas set-config name=dnssec_validation value=no
+
+# Set network discovery interval to 10 minutes (600 seconds)
+echo "Setting network discovery interval to 10 minutes..."
+maas "$MAAS_ADMIN_USERNAME" maas set-config name=active_discovery_interval value=600
+
+SSH_KEY=$(cat ~/.ssh/id_rsa.pub)
+maas $MAAS_ADMIN_USERNAME sshkeys create "key=$SSH_KEY"
+
+echo "MAAS setup script completed with new configurations."
+
+
+# maas $MAAS_ADMIN_USERNAME maas set-config name=default_storage_layout value=lvm
+# maas $MAAS_ADMIN_USERNAME maas set-config name=network_discovery value=disabled
+# maas $MAAS_ADMIN_USERNAME maas set-config name=enable_analytics value=false
+# maas $MAAS_ADMIN_USERNAME maas set-config name=enable_third_party_drivers value=false
+# maas $MAAS_ADMIN_USERNAME maas set-config name=curtin_verbose value=true
+
+
+
+echo "Configuring DHCP for fabric-1 (untagged VLAN)..."
+
+# Get the FABRIC_ID for "fabric-1"
+SUBNET_CIDR="192.168.1.0/24"
+SUBNET_ID=$(maas "$MAAS_ADMIN_USERNAME" subnets read | jq -r '.[] | select(.cidr == "'"$SUBNET_CIDR"'") | .id')
+FABRIC_ID=$(maas "$MAAS_ADMIN_USERNAME" fabrics read | jq -r '.[] | select(.name == "fabric-1") | .id')
+RACK_CONTROLLER_ID=$(maas "$MAAS_ADMIN_USERNAME" rack-controllers read | jq -r '.[] | select(.ip_addresses[] == "'"$IP_ADDRESS"'") | .system_id')
+START_IP="192.168.1.191"
+END_IP="192.168.1.254"
+
+if [ -z "$FABRIC_ID" ]; then
+    echo "Error: Could not find FABRIC_ID for 'fabric-1'. Please ensure 'fabric-1' exists in MAAS."
+    exit 1
+fi
+
+# Create a Dynamic IP Range for enlistment, commissioning, and deployment
+echo "Creating dynamic IP range from $START_IP to $END_IP..."
+maas "$MAAS_ADMIN_USERNAME" ipranges create type=dynamic start_ip="$START_IP" end_ip="$END_IP"
+
+# Enable DHCP on the untagged VLAN (VLAN tag 0)
+echo "Enabling DHCP on VLAN 0 for fabric-1 (ID: $FABRIC_ID)..."
+maas "$MAAS_ADMIN_USERNAME" vlan update "$FABRIC_ID" 0 dhcp_on=true primary_rack="$RACK_CONTROLLER_ID"
+
+echo "Setting gateway IP for subnet $SUBNET_CIDR (ID: $SUBNET_ID) to $IP_ADDRESS..."
+maas "$MAAS_ADMIN_USERNAME" subnet update $SUBNET_ID gateway_ip=$IP_ADDRESS

package/scripts/nat-iptables.sh

@@ -0,0 +1,26 @@
+#!/bin/bash
+set -euo pipefail
+
+# Disable firewalld
+sudo systemctl disable --now iptables
+sudo systemctl disable --now ufw
+sudo systemctl disable --now firewalld
+
+
+# Remove any existing entries, then append exactly one
+sudo sed -i '/^net.ipv4.ip_forward/d' /etc/sysctl.conf
+sudo sed -i '/^net.ipv6.conf.all.forwarding/d' /etc/sysctl.conf
+echo "net.ipv4.ip_forward = 1"               | sudo tee -a /etc/sysctl.conf
+echo "net.ipv6.conf.all.forwarding = 1"       | sudo tee -a /etc/sysctl.conf
+# ---
+
+sudo sysctl -p
+
+# Accept all traffic
+sudo iptables -P INPUT ACCEPT
+sudo iptables -P FORWARD ACCEPT
+sudo iptables -P OUTPUT ACCEPT
+
+# List iptables rules and forwarding flag
+sudo iptables -L -n
+sysctl net.ipv4.ip_forward net.ipv6.conf.all.forwarding

package/scripts/nvim.sh

@@ -0,0 +1,91 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+sudo dnf install -y neovim
+
+
+sudo rm -rf ~/.config/nvim
+sudo rm -rf ~/.local/share/nvim
+
+mkdir -p ~/.config/nvim
+mkdir -p ~/.local/share/nvim/site/autoload
+
+# Install vim-plug for Neovim
+curl -fLo ~/.local/share/nvim/site/autoload/plug.vim --create-dirs \
+  https://raw.githubusercontent.com/junegunn/vim-plug/master/plug.vim
+
+# Create an init.vim with nvim-tree.lua + web-devicons + gruvbox (theme)
+cat > ~/.config/nvim/init.vim <<'EOF'
+" Minimal init.vim to use nvim-tree.lua + gruvbox theme via vim-plug
+
+" --- vim-plug manager
+call plug#begin('~/.local/share/nvim/plugged')
+
+" file explorer (nvim-tree)
+Plug 'nvim-tree/nvim-tree.lua'
+Plug 'nvim-tree/nvim-web-devicons'    " optional: file icons
+
+" colorscheme
+Plug 'morhetz/gruvbox'
+
+" sensible defaults, optional
+Plug 'tpope/vim-sensible'
+
+call plug#end()
+
+" --- UI settings
+syntax on
+filetype plugin indent on
+set number
+set relativenumber
+if has('termguicolors')
+  set termguicolors
+endif
+set background=dark
+
+" gruvbox options (optional)
+let g:gruvbox_contrast_dark = 'soft'
+colorscheme gruvbox
+
+" --- nvim-tree configuration (Lua block)
+lua << 'LUA'
+-- safe require
+local ok, tree = pcall(require, "nvim-tree")
+if not ok then
+  return
+end
+tree.setup{
+  view = {
+    width = 30,
+    side = "left",
+    preserve_window_proportions = true,
+  },
+  renderer = {
+    indent_markers = { enable = true },
+  },
+  actions = {
+    open_file = {
+      quit_on_open = false,
+    }
+  }
+}
+LUA
+
+" --- mappings: Ctrl-n toggles nvim-tree
+nnoremap <C-n> :NvimTreeToggle<CR>
+
+" Open nvim-tree on startup when opening nvim with no file args
+autocmd StdinReadPre * let s:std_in=1
+autocmd VimEnter * if argc() == 0 && !exists('s:std_in') | NvimTreeToggle | wincmd p | endif
+EOF
+
+# Fix permissions in case something was left owned by root (happens if you used sudo on these paths before)
+sudo chown -R "$USER":"$USER" ~/.config/nvim ~/.local/share/nvim 2>/dev/null || true
+
+# Install plugins automatically (non-interactive)
+nvim +PlugInstall +qall
+
+echo
+echo "Done. Plugins installed."
+echo "Run 'nvim' and press Ctrl-n to toggle the file tree."
+echo "If colorscheme is not correct, ensure your terminal supports truecolor and TERM is xterm-256color."

package/scripts/snap-clean.sh

@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+# cleanup-snap.sh
+# Remove all disabled snap revisions to free up disk space.
+
+set -euo pipefail
+
+# Ensure we’re running as root
+if [[ $EUID -ne 0 ]]; then
+    echo "Please run this script with sudo or as root."
+    exit 1
+fi
+
+echo "Gathering list of snaps with disabled revisions..."
+snap list --all \
+| awk '/disabled/ {print $1, $3}' \
+| while read -r pkg rev; do
+    echo "  -> Removing $pkg (revision $rev)..."
+    snap remove "$pkg" --revision="$rev"
+done
+
+echo "Cleanup complete."
+echo
+echo "Tip: Limit how many revisions Snap retains by setting:"
+echo "  sudo snap set system refresh.retain=2"
+echo "Then apply with:"
+echo "  sudo snap refresh"

package/scripts/ssh-cluster-info.sh

@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+REMOTE_USER=$(node bin config get --plain DEFAULT_SSH_USER)
+REMOTE_HOST=$(node bin config get --plain DEFAULT_SSH_HOST)
+SSH_KEY=$(node bin config get --plain DEFAULT_SSH_KEY_PATH)
+
+chmod 600 "$SSH_KEY"
+
+ssh -i "$SSH_KEY" -o BatchMode=yes "${REMOTE_USER}@${REMOTE_HOST}" sh <<EOF
+cd /home/dd/engine
+node bin deploy dd production --info-traffic
+kubectl get pods -A
+EOF