deploy-stack 0.9.14 → 0.9.15

package/README.md

@@ -30,7 +30,7 @@ You retain complete ownership of your infrastructure code without relying on bla
 * **Hardened, Unprivileged Containers:** Built-in Dockerfile generators explicitly drop root privileges and utilize `nginx-unprivileged` for maximum Fargate security compliance.
 * **Cost & Observability Baselines:** Prevents runaway AWS bills with explicit 14-day CloudWatch log retention policies and auto-generates 5XX error alerting.
 * **Safe Overwrite Flow:** Idempotent CLI safely backs up existing configurations to timestamped `.bak` files and updates `.gitignore` to guarantee zero data loss during rapid iteration.
-* **Framework Agnostic:** Tailored container presets for Next.js, Express.js, FastAPI, and **Zero-Config Static Sites** (React, Vue, SvelteKit, Astro, Vite).
+* **Framework Agnostic:** Tailored container presets for Next.js, Express.js, FastAPI, Go, Django, Ruby on Rails, Nuxt 3, and **Zero-Config Static Sites** (React, Vue, SvelteKit, Astro, Vite).
 * **Smart Git Integration:** Automatically detects your working branch (`main`, `master`, `develop`) and binds it directly to the generated GitHub Actions pipeline.
 * **Production-Grade Defaults:** Automatically provisions an Amazon ECS Fargate cluster fronted by an Application Load Balancer across multiple availability zones.
 * **Global Edge Acceleration:** Includes an integrated AWS CloudFront CDN distribution with SSL termination and optimized caching.
@@ -39,6 +39,7 @@ You retain complete ownership of your infrastructure code without relying on bla
 * **Built-in Secrets Sync:** Provides a dedicated CLI workflow to securely push local `.env` variables into AWS Secrets Manager and map them directly into containers at runtime.
 * **Ecosystem Ready:** Integrated directly with the [deploy-stack GitHub Action](https://github.com/marketplace/actions/deploy-stack-aws-fargate-terraform-deploy) for a secure, boilerplate-free continuous deployment pipeline.
 * **Database Scaffolding:** Automatically provisions fully isolated, zero-trust AWS RDS PostgreSQL databases for backend monoliths.
+* **Smart Boilerplate Resolution:** Intelligently detects and optionally safely disables default framework CI pipelines (e.g., Rails `ci.yml`) that crash in isolated environments, guaranteeing a green pipeline on the first run.
 * **Safe Teardown:** Completely remove all generated AWS resources and empty S3 state buckets with a single `destroy` command.
 
 ---
@@ -68,6 +69,8 @@ npx deploy-stack secrets push .env.production
 ```
 *This command encrypts your values in AWS Secrets Manager and updates `terraform/secret_keys.json` to expose those variables inside your ECS tasks at boot.*
 
+*Note: For frameworks like Ruby on Rails, `deploy-stack` automatically detects your local `config/master.key` and securely injects it into AWS Secrets Manager via git-ignored `.auto.tfvars` files—ensuring zero hardcoded secrets.*
+
 ---
 
 ## 🛠️ Next Steps After Generation
@@ -125,6 +128,10 @@ your-project/
 * **[Create React App](https://github.com/anton-codes-iac/deploy-stack-cra-example):** Validates backward compatibility with legacy Webpack pipelines and `build/` auto-detection.
 * **[Astro Static Site](https://github.com/anton-codes-iac/deploy-stack-astro-example):** Demonstrates modern static site generation (SSG).
 * **[SvelteKit Application](https://github.com/anton-codes-iac/deploy-stack-svelte-example):** Demonstrates static adapter integration and custom output folder detection.
+* **[Ruby on Rails](https://github.com/anton-codes-iac/deploy-stack-rails-example):** A production Rails 7+ setup featuring an auto-provisioned PostgreSQL database and secure `.auto.tfvars` Master Key injection.
+* **[Nuxt 3 (SSR)](https://github.com/anton-codes-iac/deploy-stack-nuxt-example):** Demonstrates a fully server-side rendered Nuxt application using Nitro's optimized Node output.
+* **[Django / Python](https://github.com/anton-codes-iac/deploy-stack-django-example):** A secure Gunicorn/WSGI implementation with PostgreSQL and unprivileged container adapters.
+* **[Go / Fiber](https://github.com/anton-codes-iac/deploy-stack-go-example):** A distroless, compiled Go binary deployment demonstrating ultra-low memory footprints and instant boot times.
 ---
 
 ## 🛡️ Telemetry & Privacy

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deploy-stack",
-  "version": "0.9.14",
+  "version": "0.9.15",
   "description": "Provision production-ready AWS infrastructure and CI/CD pipelines in seconds.",
   "type": "module",
   "bin": {

package/src/commands/init.js

@@ -214,6 +214,26 @@ export async function mainStack() {
     const deployBranch = project.branch || currentGitBranch;
     const buildDir = detectedFramework?.buildDir || 'dist';
 
+    // 7.4 Check for conflicting CI boilerplate (Rails)
+    let disableDefaultCI = false;
+    if (finalFramework === 'rails') {
+        const ciPath = path.join(targetDir, '.github', 'workflows', 'ci.yml');
+        const dependabotPath = path.join(targetDir, '.github', 'dependabot.yml');
+
+        if (fsSync.existsSync(ciPath) || fsSync.existsSync(dependabotPath)) {
+            console.log('');
+            const ciContent = await confirm({
+                message: color.yellow('We detected default Rails GitHub Actions (ci.yml, dependabot.yml) that usually crash in isolated CI environments without a database. Would you like deploy-stack to safely disable them by renaming them to .bak?'),
+                initialValue: true,
+            });
+            if (typeof ciContent === 'symbol') {
+                cancel('Provisioning cancelled.');
+                process.exit(0);
+            }
+            disableDefaultCI = ciContent;
+        }
+    }
+
     // 7.5. The Pre-Flight Cost Estimator
     // We explicitly ask for financial consent to eliminate AWS billing anxiety.
     console.log(''); // Add a blank line for visual pacing
@@ -266,7 +286,8 @@ export async function mainStack() {
         BUILD_DIR: buildDir,
         finalFramework: finalFramework,
         NEEDS_DATABASE: needsDatabase,
-        DJANGO_WSGI: djangoWsgi
+        DJANGO_WSGI: djangoWsgi,
+        DISABLE_DEFAULT_CI: disableDefaultCI
     });
 
     // 11. Track the event in telemetry

package/templates/README.md

@@ -67,6 +67,10 @@ Make sure your app returns a `200 OK` at your configured path:
 * **Next.js (App Router):** Create `app/api/health/route.ts` returning a 200 response.
 * **Express.js:** Add `app.get('/api/health', (req, res) => res.sendStatus(200));`
 * **FastAPI/Python:** Add `@app.get("/api/health")` returning a 200 status.
+* **Ruby on Rails:** Rails 7.1+ includes a default `/up` health check. Ensure `Rails.application.config.force_ssl = true` isn't blocking HTTP health checks from the ALB.
+* **Django:** Add a simple view in `urls.py` that returns `HttpResponse("OK", status=200)` at your configured path.
+* **Go:** Add a handler to your mux: `http.HandleFunc("/api/health", func(w http.ResponseWriter, r *http.Request) { w.WriteHeader(200) })`
+* **Nuxt 3:** Create a server route at `server/routes/health.ts` returning `200`.
 
 ### 2. Enable Standalone Output (Next.js ONLY)
 
@@ -91,6 +95,10 @@ When running inside a Docker container, your server must bind to all network int
 Make sure your app is configured correctly:
 * **Express.js:** `app.listen(port, '0.0.0.0', () => ...)`
 * **FastAPI:** `uvicorn.run(app, host="0.0.0.0", port=8000)`
+* **Ruby on Rails:** Bound automatically by the CLI's Puma command (`-b tcp://0.0.0.0:{{PORT}}`).
+* **Django:** Bound automatically by the CLI's Gunicorn command (`--bind 0.0.0.0:{{PORT}}`).
+* **Go:** Ensure your `ListenAndServe` string looks like this: `http.ListenAndServe(":8080", nil)` or `http.ListenAndServe("0.0.0.0:8080", nil)`.
+* **Nuxt 3:** Bound automatically via the `NITRO_HOST=0.0.0.0` environment variable injected by the CLI Dockerfile.
 
 ### 4. Static Sites (Vite, Astro, React, Vue, SvelteKit)