deploy-stack 0.2.10 → 0.3.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deploy-stack",
-  "version": "0.2.10",
+  "version": "0.3.1",
   "description": "Provision production-ready AWS infrastructure and CI/CD pipelines in seconds.",
   "type": "module",
   "bin": {

package/src/commands/init.js

@@ -232,10 +232,16 @@ export async function mainStack() {
     // 9. Provide the Outro, Framework Warnings and Next Steps
     const frameworkWarnings = getFrameworkWarning(finalFramework);
 
+    const isGitInitialized = fsSync.existsSync(path.join(targetDir, '.git'));
+
     const cdStep = projectName === '.' ? '' : `1. cd ${projectName}\n        `;
     const deployStepNum = projectName === '.' ? '1' : '2';
     const gitStepNum = projectName === '.' ? '2' : '3';
 
+    const gitInstructions = isGitInitialized
+        ? `git add .\n       git commit -m "chore: add AWS infrastructure and CI/CD"\n       git push`
+        : `git init\n       git add .\n       git commit -m "chore: add AWS infrastructure and CI/CD"\n       git branch -M main\n       git remote add origin https://github.com/your-username/your-repo.git\n       git push -u origin main`;
+
     outro(`
     ${color.green('✅ Project provisioned successfully!')}
 
@@ -244,8 +250,10 @@ export async function mainStack() {
     Next steps:
     ${cdStep}${deployStepNum}. Deploy infrastructure:
        cd terraform && terraform init && terraform apply
-    ${gitStepNum}. Push to GitHub:
-       git init && git add . && git commit -m "Initial commit"
+
+    ${gitStepNum}. Push to GitHub to trigger CI/CD:
+       cd ..
+       ${gitInstructions}
 
     ${color.cyan('Once deployed, Terraform will output your new https://*.cloudfront.net URL.')}
 

package/src/utils/detector.js

@@ -13,7 +13,7 @@ export function detectFramework(targetDir) {
             const deps = { ...(pkg.dependencies || {}), ...(pkg.devDependencies || {}) };
 
             if (deps['next']) return { id: 'nextjs', name: 'Next.js' };
-            if (deps['gatsby'] || deps['react-scripts'] || deps['vue']) return { id: 'static', name: 'Static Site' };
+            if (deps['vite'] || deps['astro'] || deps['@sveltejs/kit'] || deps['gatsby'] || deps['react-scripts'] || deps['@vue/cli-service']) return { id: 'static', name: 'Static Site (Vite, Astro, React)' };
             if (deps['express']) return { id: 'node', name: 'Node.js / Express' };
         } catch (e) {
             // Silently fail if package.json is malformed

package/src/utils/warnings.js

@@ -15,10 +15,21 @@ export function getFrameworkWarning(frameworkId) {
                 color.yellow('\n    2. Your app must listen on 0.0.0.0 (not localhost) to receive traffic in Docker.\n\n')
             );
         case 'python':
-            return color.yellow(' ⚠️  IMPORTANT: PYTHON SETUP REQUIRED ') +
+            return (
+                color.bgYellow(color.black(' ⚠️  IMPORTANT: PYTHON SETUP REQUIRED ')) +
                 color.yellow('\n    1. Ensure your requirements.txt includes your web framework (e.g., fastapi, uvicorn).') +
                 color.yellow('\n    2. Your app must listen on 0.0.0.0 (not localhost) to receive traffic in Docker.') +
-                color.yellow('\n    3. Ensure your app has a health check route returning 200 OK.\n\n');
+                color.yellow('\n    3. Ensure your app has a health check route returning 200 OK.\n\n')
+            );
+        case 'static':
+            return (
+                color.bgYellow(color.black(' ⚠️  IMPORTANT: STATIC SITE SETUP REQUIRED ')) +
+                color.yellow('\n    1. Open your generated Dockerfile.') +
+                color.yellow('\n    2. Ensure the build output folder on line 15 matches your framework:') +
+                color.yellow('\n       Vite / Astro:   COPY --from=builder /app/dist /usr/share/nginx/html') +
+                color.yellow('\n       Create React App: COPY --from=builder /app/build /usr/share/nginx/html') +
+                color.yellow('\n    3. Ensure your package.json has a "build" script (e.g., "vite build").\n\n')
+            );
         default:
             return '';
     }

package/templates/README.md

@@ -92,4 +92,10 @@ When running inside a Docker container, your server must bind to all network int
 
 Make sure your app is configured correctly:
 * **Express.js:** `app.listen(port, '0.0.0.0', () => ...)`
-* **FastAPI:** `uvicorn.run(app, host="0.0.0.0", port=8000)`
+* **FastAPI:** `uvicorn.run(app, host="0.0.0.0", port=8000)`
+
+### 4. Static Sites (Vite, Astro, React, Vue)
+
+If you are deploying a static site, your application is served via a highly optimized, unprivileged Nginx container. 
+1. **Build Folder:** Different frameworks output compiled assets to different folders. Open your `Dockerfile` and ensure the `COPY --from=builder` command points to the correct folder (`dist`, `build`, or `out`).
+2. **Health Checks:** You do not need to configure a custom `/health` route. Nginx will automatically return a `200 OK` when AWS pings the root `/` index page.

package/templates/docker/static.Dockerfile

@@ -1,13 +1,37 @@
+# STAGE 1: Build the static assets
+FROM node:20-alpine AS builder
+WORKDIR /app
+
+COPY package*.json ./
+# Use clean install for reliable, reproducible builds
+RUN npm ci
+
+COPY . .
+# Runs the standard build script defined in package.json
+RUN npm run build
+
+# STAGE 2: Serve with Hardened Nginx
 FROM nginx:alpine
 
-# Remove default Nginx static assets
-RUN rm -rf /usr/share/nginx/html/*
+# ⚠️ CRITICAL: Adjust 'dist' to match your framework's output folder!
+# Vite/Astro = dist | Create React App/Gatsby = build | Next.js Static = out
+COPY --from=builder /app/dist /usr/share/nginx/html
+
+# Dynamically update the Nginx port
+RUN sed -i "s/listen       80;/listen       {{PORT}};/g" /etc/nginx/conf.d/default.conf
+
+# Silence unprivileged user directive warning in main config
+RUN sed -i 's/^user\s\+nginx;/# user nginx;/' /etc/nginx/nginx.conf
 
-# Copy your static build output (e.g., from Gatsby, React, or pure HTML)
-COPY . /usr/share/nginx/html
+# DevSecOps Hardening: Drop root privileges for the Nginx process
+RUN chown -R nginx:nginx /usr/share/nginx/html && \
+    chown -R nginx:nginx /var/cache/nginx && \
+    chown -R nginx:nginx /var/log/nginx && \
+    chown -R nginx:nginx /etc/nginx/conf.d && \
+    touch /var/run/nginx.pid && \
+    chown -R nginx:nginx /var/run/nginx.pid
 
-# Dynamically update the Nginx config to use the user's chosen port
-RUN sed -i 's/listen  *80;/listen {{PORT}};/g' /etc/nginx/conf.d/default.conf
+USER nginx
 
 EXPOSE {{PORT}}
 CMD ["nginx", "-g", "daemon off;"]