deploy-stack 0.2.9 → 0.3.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deploy-stack",
-  "version": "0.2.9",
+  "version": "0.3.0",
   "description": "Provision production-ready AWS infrastructure and CI/CD pipelines in seconds.",
   "type": "module",
   "bin": {

package/src/utils/detector.js

@@ -13,7 +13,7 @@ export function detectFramework(targetDir) {
             const deps = { ...(pkg.dependencies || {}), ...(pkg.devDependencies || {}) };
 
             if (deps['next']) return { id: 'nextjs', name: 'Next.js' };
-            if (deps['gatsby'] || deps['react-scripts'] || deps['vue']) return { id: 'static', name: 'Static Site' };
+            if (deps['vite'] || deps['astro'] || deps['@sveltejs/kit'] || deps['gatsby'] || deps['react-scripts'] || deps['@vue/cli-service']) return { id: 'static', name: 'Static Site (Vite, Astro, React)' };
             if (deps['express']) return { id: 'node', name: 'Node.js / Express' };
         } catch (e) {
             // Silently fail if package.json is malformed

package/src/utils/generator.js

@@ -41,11 +41,11 @@ export async function generateTemplates(targetDir, config) {
     // 4. Create empty secrets file
     await fs.writeFile(path.join(targetDir, 'terraform', 'secret_keys.json'), "[]");
 
-    // 5. Handle .gitignore appending cleanly
+    // 5. Handle .gitignore dynamically based on framework
     const targetGitignore = path.join(targetDir, '.gitignore');
 
     if (!fsSync.existsSync(targetGitignore)) {
-        await fs.writeFile(targetGitignore, gitignoreContent(options.finalFramework));
+        await fs.writeFile(targetGitignore, getGitignoreContent(config.finalFramework));
     } else {
         const existingGitignore = await fs.readFile(targetGitignore, 'utf-8');
         if (!existingGitignore.includes('terraform/.terraform/')) {

package/src/utils/warnings.js

@@ -15,10 +15,21 @@ export function getFrameworkWarning(frameworkId) {
                 color.yellow('\n    2. Your app must listen on 0.0.0.0 (not localhost) to receive traffic in Docker.\n\n')
             );
         case 'python':
-            return color.yellow(' ⚠️  IMPORTANT: PYTHON SETUP REQUIRED ') +
+            return (
+                color.bgYellow(color.black(' ⚠️  IMPORTANT: PYTHON SETUP REQUIRED ')) +
                 color.yellow('\n    1. Ensure your requirements.txt includes your web framework (e.g., fastapi, uvicorn).') +
                 color.yellow('\n    2. Your app must listen on 0.0.0.0 (not localhost) to receive traffic in Docker.') +
-                color.yellow('\n    3. Ensure your app has a health check route returning 200 OK.\n\n');
+                color.yellow('\n    3. Ensure your app has a health check route returning 200 OK.\n\n')
+            );
+        case 'static':
+            return (
+                color.bgYellow(color.black(' ⚠️  IMPORTANT: STATIC SITE SETUP REQUIRED ')) +
+                color.yellow('\n    1. Open your generated Dockerfile.') +
+                color.yellow('\n    2. Ensure the build output folder on line 15 matches your framework:') +
+                color.yellow('\n       Vite / Astro:   COPY --from=builder /app/dist /usr/share/nginx/html') +
+                color.yellow('\n       Create React App: COPY --from=builder /app/build /usr/share/nginx/html') +
+                color.yellow('\n    3. Ensure your package.json has a "build" script (e.g., "vite build").\n\n')
+            );
         default:
             return '';
     }

package/templates/README.md

@@ -92,4 +92,10 @@ When running inside a Docker container, your server must bind to all network int
 
 Make sure your app is configured correctly:
 * **Express.js:** `app.listen(port, '0.0.0.0', () => ...)`
-* **FastAPI:** `uvicorn.run(app, host="0.0.0.0", port=8000)`
+* **FastAPI:** `uvicorn.run(app, host="0.0.0.0", port=8000)`
+
+### 4. Static Sites (Vite, Astro, React, Vue)
+
+If you are deploying a static site, your application is served via a highly optimized, unprivileged Nginx container. 
+1. **Build Folder:** Different frameworks output compiled assets to different folders. Open your `Dockerfile` and ensure the `COPY --from=builder` command points to the correct folder (`dist`, `build`, or `out`).
+2. **Health Checks:** You do not need to configure a custom `/health` route. Nginx will automatically return a `200 OK` when AWS pings the root `/` index page.

package/templates/docker/static.Dockerfile

@@ -1,13 +1,37 @@
+# STAGE 1: Build the static assets
+FROM node:20-alpine AS builder
+WORKDIR /app
+
+COPY package*.json ./
+# Use clean install for reliable, reproducible builds
+RUN npm ci
+
+COPY . .
+# Runs the standard build script defined in package.json
+RUN npm run build
+
+# STAGE 2: Serve with Hardened Nginx
 FROM nginx:alpine
 
-# Remove default Nginx static assets
-RUN rm -rf /usr/share/nginx/html/*
+# ⚠️ CRITICAL: Adjust 'dist' to match your framework's output folder!
+# Vite/Astro = dist | Create React App/Gatsby = build | Next.js Static = out
+COPY --from=builder /app/dist /usr/share/nginx/html
+
+# Dynamically update the Nginx port
+RUN sed -i "s/listen       80;/listen       {{PORT}};/g" /etc/nginx/conf.d/default.conf
+
+# Silence unprivileged user directive warning in main config
+RUN sed -i 's/^user\s\+nginx;/# user nginx;/' /etc/nginx/nginx.conf
 
-# Copy your static build output (e.g., from Gatsby, React, or pure HTML)
-COPY . /usr/share/nginx/html
+# DevSecOps Hardening: Drop root privileges for the Nginx process
+RUN chown -R nginx:nginx /usr/share/nginx/html && \
+    chown -R nginx:nginx /var/cache/nginx && \
+    chown -R nginx:nginx /var/log/nginx && \
+    chown -R nginx:nginx /etc/nginx/conf.d && \
+    touch /var/run/nginx.pid && \
+    chown -R nginx:nginx /var/run/nginx.pid
 
-# Dynamically update the Nginx config to use the user's chosen port
-RUN sed -i 's/listen  *80;/listen {{PORT}};/g' /etc/nginx/conf.d/default.conf
+USER nginx
 
 EXPOSE {{PORT}}
 CMD ["nginx", "-g", "daemon off;"]