deploy-stack 0.2.7 → 0.2.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deploy-stack",
-  "version": "0.2.7",
+  "version": "0.2.9",
   "description": "Provision production-ready AWS infrastructure and CI/CD pipelines in seconds.",
   "type": "module",
   "bin": {

package/src/utils/generator.js

@@ -43,14 +43,75 @@ export async function generateTemplates(targetDir, config) {
 
     // 5. Handle .gitignore appending cleanly
     const targetGitignore = path.join(targetDir, '.gitignore');
-    const gitignoreContent = await fs.readFile(path.join(templatesDir, '_gitignore'), 'utf-8');
 
     if (!fsSync.existsSync(targetGitignore)) {
-        await fs.writeFile(targetGitignore, gitignoreContent);
+        await fs.writeFile(targetGitignore, gitignoreContent(options.finalFramework));
     } else {
         const existingGitignore = await fs.readFile(targetGitignore, 'utf-8');
         if (!existingGitignore.includes('terraform/.terraform/')) {
-            await fs.appendFile(targetGitignore, '\n# Added by deploy-stack (Terraform)\nterraform/.terraform/\nterraform/*.tfstate\nterraform/*.tfstate.backup\nterraform/.terraform.lock.hcl\nterraform/secret_keys.json\nterraform/.terraform.*\n');
+            const appendIgnore = '\n# Added by deploy-stack (Terraform)\nterraform/.terraform/\nterraform/*.tfstate\nterraform/*.tfstate.backup\nterraform/.terraform.lock.hcl\nterraform/secret_keys.json\nterraform/.terraform.*\n.env\n';
+            await fs.appendFile(targetGitignore, appendIgnore);
         }
     }
+}
+
+function getGitignoreContent(framework) {
+    const baseIgnore = `
+# Infrastructure (deploy-stack)
+terraform/.terraform/
+terraform/*.tfstate
+terraform/*.tfstate.backup
+terraform/.terraform.lock.hcl
+terraform/secret_keys.json
+terraform/.terraform.*
+.env
+
+# OS
+.DS_Store
+Thumbs.db
+`;
+
+    const nodeIgnore = `
+# Node.js
+node_modules/
+npm-debug.log
+yarn-error.log
+`;
+
+    const nextjsIgnore = `
+# Next.js
+node_modules/
+.next/
+out/
+build/
+next-env.d.ts
+`;
+
+    const pythonIgnore = `
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+venv/
+env/
+.venv/
+.pytest_cache/
+`;
+
+    const staticIgnore = `
+# Static Sites
+node_modules/
+dist/
+build/
+.cache/
+public/
+`;
+
+    let frameworkIgnore = '';
+    if (framework === 'node') frameworkIgnore = nodeIgnore;
+    if (framework === 'nextjs') frameworkIgnore = nextjsIgnore;
+    if (framework === 'python') frameworkIgnore = pythonIgnore;
+    if (framework === 'static') frameworkIgnore = staticIgnore;
+
+    return (baseIgnore + frameworkIgnore).trim();
 }

package/src/utils/warnings.js

@@ -14,7 +14,11 @@ export function getFrameworkWarning(frameworkId) {
                 color.yellow('\n    1. Ensure your package.json has a "start" script (e.g., "start": "node index.js").') +
                 color.yellow('\n    2. Your app must listen on 0.0.0.0 (not localhost) to receive traffic in Docker.\n\n')
             );
-        // Python / FastAPI warnings can be added here easily!
+        case 'python':
+            return color.yellow(' ⚠️  IMPORTANT: PYTHON SETUP REQUIRED ') +
+                color.yellow('\n    1. Ensure your requirements.txt includes your web framework (e.g., fastapi, uvicorn).') +
+                color.yellow('\n    2. Your app must listen on 0.0.0.0 (not localhost) to receive traffic in Docker.') +
+                color.yellow('\n    3. Ensure your app has a health check route returning 200 OK.\n\n');
         default:
             return '';
     }

package/templates/docker/python.Dockerfile

@@ -1,7 +1,26 @@
 FROM python:3.11-slim
+
+# Prevent Python from writing .pyc files and buffer stdout for cleaner logs
+ENV PYTHONDONTWRITEBYTECODE=1
+ENV PYTHONUNBUFFERED=1
+
 WORKDIR /app
+
+# Create a non-root user for security compliance
+RUN adduser --disabled-password --gecos '' appuser
+
+# Install dependencies without caching to keep the image size small
 COPY requirements.txt .
-RUN pip install -r requirements.txt
+RUN pip install --no-cache-dir -r requirements.txt
+
 COPY . .
+
+# Secure file permissions
+RUN chown -R appuser:appuser /app
+
+# Drop root privileges
+USER appuser
+
 EXPOSE {{PORT}}
+
 CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "{{PORT}}"]

package/templates/_gitignore

@@ -1,19 +0,0 @@
-# Terraform
-terraform/.terraform/
-terraform/*.tfstate
-terraform/*.tfstate.backup
-terraform/.terraform.lock.hcl
-terraform/secret_keys.json
-terraform/.terraform.*
-
-# Node & Next.js
-node_modules/
-.next/
-.env
-.env.*
-!.env.example
-
-# Python
-__pycache__/
-*.pyc
-venv/