easy-devops 0.1.2 → 0.1.4

package/cli/index.js

@@ -11,6 +11,7 @@ import sslMenu from './menus/ssl.js';
 import domainsMenu from './menus/domains.js';
 import dashboardMenu from './menus/dashboard.js';
 import settingsMenu from './menus/settings.js';
+import updateMenu from './menus/update.js';
 
 const require = createRequire(import.meta.url);
 const { version } = require('../package.json');
@@ -44,6 +45,7 @@ async function showMainMenu() {
       '🔗 Domain Manager',
       '🎛️ Open Dashboard',
       '⚙️ Settings',
+      '🔄 Check for Updates',
       '✖ Exit',
     ],
   }]);
@@ -58,6 +60,7 @@ async function dispatch(choice) {
     case '🔗 Domain Manager': await domainsMenu(); break;
     case '🎛️ Open Dashboard': await dashboardMenu(); break;
     case '⚙️ Settings': await settingsMenu(); break;
+    case '🔄 Check for Updates': await updateMenu(); break;
     case '✖ Exit': process.exit(0);
   }
 }

package/cli/managers/nginx-manager.js

@@ -268,7 +268,7 @@ async function installNginx() {
   let nginxVersion = FALLBACK_VERSION;
 
   const fetchVersionResult = await run(
-    `try { $p=(Invoke-WebRequest -Uri 'https://nginx.org/en/download.html' -UseBasicParsing -TimeoutSec 15).Content; if($p -match 'nginx-(\\d+\\.\\d+\\.\\d+)\\.zip'){$Matches[1]}else{''} } catch { '' }`,
+    `[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; try { $p=(Invoke-WebRequest -Uri 'https://nginx.org/en/download.html' -UseBasicParsing -TimeoutSec 15).Content; if($p -match 'nginx-(\\d+\\.\\d+\\.\\d+)\\.zip'){$Matches[1]}else{''} } catch { '' }`,
     { timeout: 20000 },
   );
   const fetched = (fetchVersionResult.stdout || '').trim();
@@ -276,15 +276,30 @@ async function installNginx() {
 
   const { nginxDir } = loadConfig();
   const zipUrl = `https://nginx.org/download/nginx-${nginxVersion}.zip`;
+  const zipDest = `$env:TEMP\\nginx-${nginxVersion}.zip`;
 
   spinner.text = `Downloading nginx ${nginxVersion}…`;
 
-  const downloadResult = await run(
-    `$ProgressPreference='SilentlyContinue'; Invoke-WebRequest -Uri '${zipUrl}' -OutFile "$env:TEMP\\nginx-${nginxVersion}.zip" -UseBasicParsing -TimeoutSec 120`,
+  // Try Invoke-WebRequest with TLS 1.2 forced, fall back to curl.exe
+  let downloadOk = false;
+  let downloadResult = await run(
+    `[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; $ProgressPreference='SilentlyContinue'; Invoke-WebRequest -Uri '${zipUrl}' -OutFile "${zipDest}" -UseBasicParsing -TimeoutSec 120`,
     { timeout: 130000 },
   );
+  if (downloadResult.success) {
+    downloadOk = true;
+  } else {
+    const hasCurl = (await run('where.exe curl.exe 2>$null')).success;
+    if (hasCurl) {
+      downloadResult = await run(
+        `curl.exe -L --silent --show-error --max-time 120 -o "${zipDest}" "${zipUrl}"`,
+        { timeout: 130000 },
+      );
+      if (downloadResult.success) downloadOk = true;
+    }
+  }
 
-  if (!downloadResult.success) {
+  if (!downloadOk) {
     spinner.fail('Download failed');
     console.log(chalk.red(downloadResult.stderr || downloadResult.stdout));
     console.log(chalk.gray(`\n  Download nginx manually from: https://nginx.org/en/download.html\n`));

package/cli/managers/ssl-manager.js

@@ -276,18 +276,46 @@ async function installCertbot() {
     console.log(chalk.yellow('  Chocolatey failed, trying direct download...\n'));
   }
 
-  // 3. Direct download — official EFF installer (NSIS, supports /S silent flag)
-  const installerUrl = 'https://dl.eff.org/certbot-beta-installer-win_amd64_signed.exe';
+  // 3. Direct download — try multiple sources × multiple download methods
+  //    PowerShell 5.1 on Windows Server defaults to TLS 1.0; GitHub requires TLS 1.2+.
+  //    Force TLS 1.2 before every Invoke-WebRequest call.
+  //    Also try curl.exe (built into Windows Server 2019+) as a second method.
+  const INSTALLER_FILENAME = 'certbot-beta-installer-win_amd64_signed.exe';
+  const INSTALLER_DEST     = '$env:TEMP\\certbot-installer.exe';
+  const downloadSources = [
+    `https://github.com/certbot/certbot/releases/latest/download/${INSTALLER_FILENAME}`,
+    `https://dl.eff.org/${INSTALLER_FILENAME}`,
+  ];
+
+  const hasCurl = (await run('where.exe curl.exe 2>$null')).success;
+
+  let downloaded = false;
+  for (const url of downloadSources) {
+    const label = new URL(url).hostname;
+    console.log(chalk.gray(`\n  Downloading certbot installer from ${label} ...\n`));
+
+    // Method A: Invoke-WebRequest with TLS 1.2 forced
+    const iwr = await run(
+      `[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; $ProgressPreference='SilentlyContinue'; Invoke-WebRequest -Uri '${url}' -OutFile "${INSTALLER_DEST}" -UseBasicParsing -TimeoutSec 120`,
+      { timeout: 130000 },
+    );
+    if (iwr.success) { downloaded = true; break; }
 
-  console.log(chalk.gray('\n  Downloading certbot installer from dl.eff.org ...\n'));
+    // Method B: curl.exe (handles TLS independently of PowerShell/.NET settings)
+    if (hasCurl) {
+      const curlResult = await run(
+        `curl.exe -L --silent --show-error --max-time 120 -o "${INSTALLER_DEST}" "${url}"`,
+        { timeout: 130000 },
+      );
+      if (curlResult.success) { downloaded = true; break; }
+    }
 
-  const downloadResult = await run(
-    `$ProgressPreference='SilentlyContinue'; Invoke-WebRequest -Uri '${installerUrl}' -OutFile "$env:TEMP\\certbot-installer.exe" -UseBasicParsing -TimeoutSec 120`,
-    { timeout: 130000 },
-  );
+    console.log(chalk.yellow(`  Failed from ${label}`));
+  }
 
-  if (!downloadResult.success) {
-    console.log(chalk.red('  Download failed: ' + (downloadResult.stderr || downloadResult.stdout)));
+  if (!downloaded) {
+    console.log(chalk.red('\n  Download failed from all sources.'));
+    console.log(chalk.gray('  Install manually: https://certbot.eff.org/instructions?ws=other&os=windows\n'));
     return { success: false };
   }
 

package/cli/menus/dashboard.js

@@ -69,7 +69,7 @@ function isPidAlive(pid) {
 
 // ─── Status ───────────────────────────────────────────────────────────────────
 
-async function getDashboardStatus() {
+export async function getDashboardStatus() {
   const { dashboardPort } = loadConfig();
   const storedPid  = dbGet('dashboard-pid');
   const storedPort = dbGet('dashboard-port') ?? dashboardPort;
@@ -91,7 +91,7 @@ async function getDashboardStatus() {
 
 // ─── Start ────────────────────────────────────────────────────────────────────
 
-async function startDashboard(port) {
+export async function startDashboard(port) {
   await fs.mkdir(path.dirname(LOG_PATH), { recursive: true });
 
   // openSync gives a real fd immediately — required by spawn's stdio option
@@ -118,7 +118,7 @@ async function startDashboard(port) {
 
 // ─── Stop ─────────────────────────────────────────────────────────────────────
 
-async function stopDashboard(pid) {
+export async function stopDashboard(pid) {
   if (!pid) return { success: false };
   try {
     if (isWindows) {

package/cli/menus/update.js

@@ -0,0 +1,178 @@
+/**
+ * cli/menus/update.js
+ *
+ * Check for updates and upgrade easy-devops in place.
+ *
+ * Flow:
+ *  1. Fetch latest version from npm registry
+ *  2. If an update is available, offer to install it
+ *  3. Before installing: record dashboard running state in DB
+ *     (key: 'update-pre-dashboard') so it survives a crash mid-update
+ *  4. Stop dashboard if it was running
+ *  5. Run: npm install -g easy-devops@<latest>
+ *  6. Re-start dashboard if it was running before
+ *  7. Clear the saved state key
+ */
+
+import chalk from 'chalk';
+import inquirer from 'inquirer';
+import ora from 'ora';
+import path from 'path';
+import { fileURLToPath } from 'url';
+import { createRequire } from 'module';
+import { run } from '../../core/shell.js';
+import { dbGet, dbSet } from '../../core/db.js';
+import { loadConfig } from '../../core/config.js';
+import { getDashboardStatus, startDashboard, stopDashboard } from './dashboard.js';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const require   = createRequire(import.meta.url);
+const { version: currentVersion } = require('../../package.json');
+
+// ─── Version helpers ──────────────────────────────────────────────────────────
+
+async function fetchLatestVersion() {
+  const result = await run('npm view easy-devops version', { timeout: 20000 });
+  if (result.success && result.stdout.trim()) return result.stdout.trim();
+  return null;
+}
+
+function isNewer(latest, current) {
+  const parse = v => v.replace(/^v/, '').split('.').map(Number);
+  const [la, lb, lc] = parse(latest);
+  const [ca, cb, cc] = parse(current);
+  if (la !== ca) return la > ca;
+  if (lb !== cb) return lb > cb;
+  return lc > cc;
+}
+
+// ─── Recover interrupted update ───────────────────────────────────────────────
+// If a previous update crashed after stopping the dashboard but before restarting
+// it, the key 'update-pre-dashboard' is still set. Offer to restart it.
+
+async function recoverIfNeeded() {
+  const saved = dbGet('update-pre-dashboard');
+  if (!saved?.wasRunning) return;
+
+  console.log(chalk.yellow('\n  A previous update left the dashboard stopped.'));
+  const { restart } = await inquirer.prompt([{
+    type:    'confirm',
+    name:    'restart',
+    message: 'Restart the dashboard now?',
+    default: true,
+  }]);
+
+  if (restart) {
+    const port = saved.port || loadConfig().dashboardPort;
+    const sp   = ora(`Starting dashboard on port ${port}...`).start();
+    const res  = await startDashboard(port);
+    res.success
+      ? sp.succeed(`Dashboard restarted on port ${port}`)
+      : sp.fail('Could not restart dashboard — use the Dashboard menu');
+  }
+
+  dbSet('update-pre-dashboard', null);
+}
+
+// ─── Perform update ───────────────────────────────────────────────────────────
+
+async function performUpdate(latestVersion) {
+  // Step 1 — snapshot dashboard state and persist it
+  const status = await getDashboardStatus();
+  dbSet('update-pre-dashboard', {
+    wasRunning: status.running,
+    pid:        status.pid,
+    port:       status.port,
+  });
+
+  // Step 2 — stop dashboard if running
+  if (status.running) {
+    const sp = ora('Stopping dashboard...').start();
+    await stopDashboard(status.pid);
+    sp.succeed('Dashboard stopped');
+  }
+
+  // Step 3 — install new version
+  const sp = ora(`Installing easy-devops@${latestVersion}...`).start();
+  const result = await run(`npm install -g easy-devops@${latestVersion}`, { timeout: 120000 });
+
+  if (!result.success) {
+    sp.fail('Update failed');
+    console.log(chalk.red('\n' + (result.stderr || result.stdout) + '\n'));
+    // Leave 'update-pre-dashboard' in DB so recovery runs on next launch
+    return false;
+  }
+
+  sp.succeed(`Updated to v${latestVersion}`);
+
+  // Step 4 — restart dashboard if it was running before
+  const saved = dbGet('update-pre-dashboard');
+  dbSet('update-pre-dashboard', null);
+
+  if (saved?.wasRunning) {
+    const port    = saved.port || loadConfig().dashboardPort;
+    const restSp  = ora(`Restarting dashboard on port ${port}...`).start();
+    const res     = await startDashboard(port);
+    res.success
+      ? restSp.succeed(`Dashboard restarted on port ${port}`)
+      : restSp.fail('Could not restart dashboard — use the Dashboard menu');
+  }
+
+  return true;
+}
+
+// ─── Menu ─────────────────────────────────────────────────────────────────────
+
+export default async function updateMenu() {
+  // Recover from a crashed previous update first
+  await recoverIfNeeded();
+
+  const spinner = ora('Checking for updates...').start();
+  const latestVersion = await fetchLatestVersion();
+  spinner.stop();
+
+  console.log(chalk.bold('\n  Check for Updates'));
+  console.log(chalk.gray('  ' + '─'.repeat(40)));
+  console.log(`  Current version : ${chalk.cyan('v' + currentVersion)}`);
+
+  if (!latestVersion) {
+    console.log(chalk.yellow('  Could not reach npm registry. Check your internet connection.\n'));
+    await inquirer.prompt([{ type: 'input', name: '_', message: 'Press Enter to go back...' }]);
+    return;
+  }
+
+  const updateAvailable = isNewer(latestVersion, currentVersion);
+
+  if (updateAvailable) {
+    console.log(`  Latest version  : ${chalk.green('v' + latestVersion)}  ${chalk.yellow('← update available')}\n`);
+  } else {
+    console.log(`  Latest version  : ${chalk.green('v' + latestVersion)}  ${chalk.gray('✓ up to date')}\n`);
+  }
+
+  const choices = updateAvailable
+    ? [`Update to v${latestVersion}`, new inquirer.Separator(), '← Back']
+    : ['← Back'];
+
+  let choice;
+  try {
+    ({ choice } = await inquirer.prompt([{
+      type:    'list',
+      name:    'choice',
+      message: 'Select an option:',
+      choices,
+    }]));
+  } catch (err) {
+    if (err.name === 'ExitPromptError') return;
+    throw err;
+  }
+
+  if (choice === `Update to v${latestVersion}`) {
+    const success = await performUpdate(latestVersion);
+    if (success) {
+      console.log(chalk.gray('\n  Restart easy-devops to use the new version.\n'));
+    }
+    try {
+      await inquirer.prompt([{ type: 'input', name: '_', message: 'Press Enter to continue...' }]);
+    } catch { /* ExitPromptError */ }
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "easy-devops",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "A unified DevOps management tool with CLI and web dashboard for managing Nginx, SSL certificates, and Node.js on Linux and Windows servers.",
   "keywords": [
     "devops",