kybernus 1.0.0

package/templates/python-fastapi/pro/mvc/.github/workflows/ci-cd.yml.hbs

@@ -0,0 +1,88 @@
+name: CI/CD Pipeline
+
+on:
+  push:
+    branches: [main, develop]
+    pull_request:
+      branches: [main]
+
+      env:
+        NODE_VERSION: '20'
+        AWS_REGION: 'us-east-1'
+
+        jobs:
+          test:
+            runs-on: ubuntu-latest
+
+            steps:
+              - uses: actions/checkout@v4
+
+              - name: Setup Node.js
+              uses: actions/setup-node@v4
+              with:
+                node-version: $\{{ env.NODE_VERSION }}
+                cache: 'npm'
+
+                - name: Install dependencies
+                run: npm ci
+
+                - name: Run linter
+                run: npm run lint --if-present
+
+                - name: Run tests
+                run: npm test --if-present
+
+                - name: Build
+                run: npm run build
+
+                build-and-push:
+                  needs: test
+                  runs-on: ubuntu-latest
+                  if: github.ref == 'refs/heads/main'
+
+                  steps:
+                    - uses: actions/checkout@v4
+
+                    - name: Configure AWS credentials
+                    uses: aws-actions/configure-aws-credentials@v4
+                    with:
+                      aws-access-key-id: $\{{ secrets.AWS_ACCESS_KEY_ID }}
+                      aws-secret-access-key: $\{{ secrets.AWS_SECRET_ACCESS_KEY }}
+                      aws-region: $\{{ env.AWS_REGION }}
+
+                      - name: Login to Amazon ECR
+                      id: login-ecr
+                      uses: aws-actions/amazon-ecr-login@v2
+
+                      - name: Build, tag, and push image to Amazon ECR
+                      env:
+                        ECR_REGISTRY: $\{{ steps.login-ecr.outputs.registry }}
+                        ECR_REPOSITORY: {{projectNameKebabCase}}
+                        IMAGE_TAG: $\{{ github.sha }}
+                        run: |
+                        docker build -t $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG .
+                        docker build -t $ECR_REGISTRY/$ECR_REPOSITORY:latest .
+                        docker push $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG
+                        docker push $ECR_REGISTRY/$ECR_REPOSITORY:latest
+
+                        deploy:
+                          needs: build-and-push
+                          runs-on: ubuntu-latest
+                          if: github.ref == 'refs/heads/main'
+
+                          steps:
+                            - uses: actions/checkout@v4
+
+                            - name: Configure AWS credentials
+                            uses: aws-actions/configure-aws-credentials@v4
+                            with:
+                              aws-access-key-id: $\{{ secrets.AWS_ACCESS_KEY_ID }}
+                              aws-secret-access-key: $\{{ secrets.AWS_SECRET_ACCESS_KEY }}
+                              aws-region: $\{{ env.AWS_REGION }}
+
+                              - name: Deploy to ECS
+                              run: |
+                              aws ecs update-service \
+                              --cluster {{projectNameKebabCase}}-prod \
+                              --service {{projectNameKebabCase}}-api \
+                              --force-new-deployment

package/templates/python-fastapi/pro/mvc/Dockerfile.hbs

@@ -0,0 +1,20 @@
+# Production Dockerfile for {{projectName}}
+
+FROM python:3.11-slim
+
+WORKDIR /app
+
+# Install dependencies
+COPY requirements.txt .
+RUN pip install --no-cache-dir -r requirements.txt
+
+# Copy source
+COPY . .
+
+# Create non-root user
+RUN adduser --disabled-password --gecos "" appuser
+USER appuser
+
+EXPOSE 8000
+
+CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"]

package/templates/python-fastapi/pro/mvc/README.md.hbs

@@ -0,0 +1,41 @@
+# {{projectName}}
+
+> Generated by [Kybernus CLI](https://kybernus.dev) 🚀 (Free)
+
+## Stack
+
+- **Framework**: FastAPI
+- **Python**: 3.11+
+- **Validation**: Pydantic v2
+
+## Quick Start
+
+```bash
+# Create virtual environment
+python -m venv venv
+source venv/bin/activate # Linux/Mac
+# or: venv\Scripts\activate # Windows
+
+# Install dependencies
+pip install -r requirements.txt
+
+# Run development server
+uvicorn app.main:app --reload
+```
+
+## API Endpoints
+
+- `GET /api/health` - Health check
+- `GET /api/items` - List items
+- `POST /api/items` - Create item
+- `GET /api/items/{id}` - Get item
+- `DELETE /api/items/{id}` - Delete item
+
+## Documentation
+
+- Swagger UI: http://localhost:8000/docs
+- ReDoc: http://localhost:8000/redoc
+
+---
+
+Made with ❤️ using [Kybernus](https://kybernus.dev)

package/templates/python-fastapi/pro/mvc/app/controllers/auth.py.hbs

@@ -0,0 +1,46 @@
+from fastapi import APIRouter, HTTPException, Depends
+from pydantic import BaseModel, EmailStr
+from app.middleware.security import hash_password, verify_password, create_access_token, get_current_user
+
+router = APIRouter()
+
+# In-memory user store (replace with database)
+users_db: dict = {}
+
+class UserRegister(BaseModel):
+    email: EmailStr
+    name: str
+    password: str
+
+class UserLogin(BaseModel):
+    email: EmailStr
+    password: str
+
+class AuthResponse(BaseModel):
+    token: str
+    user: dict
+
+@router.post("/register", response_model=AuthResponse)
+async def register(data: UserRegister):
+    if data.email in users_db:
+        raise HTTPException(status_code=400, detail="User already exists")
+    
+    hashed = hash_password(data.password)
+    user = {"id": str(len(users_db) + 1), "email": data.email, "name": data.name, "password": hashed}
+    users_db[data.email] = user
+    
+    token = create_access_token({"sub": user["id"], "email": user["email"]})
+    return {"token": token, "user": {"id": user["id"], "email": user["email"], "name": user["name"]}}
+
+@router.post("/login", response_model=AuthResponse)
+async def login(data: UserLogin):
+    user = users_db.get(data.email)
+    if not user or not verify_password(data.password, user["password"]):
+        raise HTTPException(status_code=401, detail="Invalid credentials")
+    
+    token = create_access_token({"sub": user["id"], "email": user["email"]})
+    return {"token": token, "user": {"id": user["id"], "email": user["email"], "name": user["name"]}}
+
+@router.get("/me")
+async def get_me(current_user: dict = Depends(get_current_user)):
+    return {"user": current_user}

package/templates/python-fastapi/pro/mvc/app/controllers/health.py.hbs

@@ -0,0 +1,7 @@
+from fastapi import APIRouter
+
+router = APIRouter()
+
+@router.get("/health")
+async def health_check():
+    return {"status": "healthy", "service": "{{projectName}}"}

package/templates/python-fastapi/pro/mvc/app/controllers/items.py.hbs

@@ -0,0 +1,21 @@
+from fastapi import APIRouter, HTTPException
+from app.services.item_service import ItemService
+from app.schemas.item import ItemCreate, ItemResponse
+
+router = APIRouter()
+service = ItemService()
+
+@router.get("/", response_model=list[ItemResponse])
+async def list_items():
+    return service.list_items()
+
+@router.post("/", response_model=ItemResponse, status_code=201)
+async def create_item(item: ItemCreate):
+    return service.create_item(item)
+
+@router.get("/{item_id}", response_model=ItemResponse)
+async def get_item(item_id: str):
+    item = service.get_item(item_id)
+    if not item:
+        raise HTTPException(status_code=404, detail="Item not found")
+    return item

package/templates/python-fastapi/pro/mvc/app/controllers/payments.py.hbs

@@ -0,0 +1,32 @@
+from fastapi import APIRouter, HTTPException
+from pydantic import BaseModel
+import os
+
+router = APIRouter()
+
+class CheckoutRequest(BaseModel):
+    price_id: str
+    customer_id: str | None = None
+
+@router.post("/checkout")
+async def create_checkout(data: CheckoutRequest):
+    # Stripe integration would go here
+    # For now, return mock data
+    return {
+        "checkout_url": f"https://checkout.stripe.com/session_{data.price_id}",
+        "session_id": "cs_test_1234567890"
+    }
+
+@router.post("/webhook")
+async def stripe_webhook(payload: dict):
+    # Handle Stripe webhook events
+    event_type = payload.get("type")
+    
+    if event_type == "checkout.session.completed":
+        # Handle successful checkout
+        pass
+    elif event_type == "customer.subscription.updated":
+        # Handle subscription update
+        pass
+    
+    return {"received": True}

package/templates/python-fastapi/pro/mvc/app/main.py.hbs

@@ -0,0 +1,20 @@
+from fastapi import FastAPI
+from app.controllers import health, auth, items, payments
+
+app = FastAPI(title="{{projectName}}")
+
+# Health check
+app.include_router(health.router, tags=["Health"])
+
+# Auth
+app.include_router(auth.router, prefix="/api/auth", tags=["Authentication"])
+
+# Items
+app.include_router(items.router, prefix="/api/items", tags=["Items"])
+
+# Payments
+app.include_router(payments.router, prefix="/api/payments", tags=["Payments"])
+
+if __name__ == "__main__":
+    import uvicorn
+    uvicorn.run(app, host="0.0.0.0", port=8000)

package/templates/python-fastapi/pro/mvc/app/middleware/security.py.hbs

@@ -0,0 +1,39 @@
+from passlib.context import CryptContext
+from jose import jwt, JWTError
+from datetime import datetime, timedelta
+from fastapi import HTTPException, Security
+from fastapi.security import HTTPBearer, HTTPAuthorizationCredentials
+import os
+
+pwd_context = CryptContext(schemes=["bcrypt"], deprecated="auto")
+security = HTTPBearer()
+
+SECRET_KEY = os.getenv("JWT_SECRET", "your-secret-key-change-in-production")
+ALGORITHM = "HS256"
+ACCESS_TOKEN_EXPIRE_MINUTES = 60 * 24 * 7  # 7 days
+
+def hash_password(password: str) -> str:
+    return pwd_context.hash(password)
+
+def verify_password(plain_password: str, hashed_password: str) -> bool:
+    return pwd_context.verify(plain_password, hashed_password)
+
+def create_access_token(data: dict) -> str:
+    to_encode = data.copy()
+    expire = datetime.utcnow() + timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES)
+    to_encode.update({"exp": expire})
+    return jwt.encode(to_encode, SECRET_KEY, algorithm=ALGORITHM)
+
+def get_current_user(credentials: HTTPAuthorizationCredentials = Security(security)):
+    try:
+        token = credentials.credentials
+        payload = jwt.decode(token, SECRET_KEY, algorithms=[ALGORITHM])
+        user_id = payload.get("sub")
+        email = payload.get("email")
+        
+        if user_id is None:
+            raise HTTPException(status_code=401, detail="Invalid authentication credentials")
+        
+        return {"id": user_id, "email": email}
+    except JWTError:
+        raise HTTPException(status_code=401, detail="Invalid authentication credentials")

package/templates/python-fastapi/pro/mvc/app/models/item.py.hbs

@@ -0,0 +1,11 @@
+from dataclasses import dataclass, field
+from datetime import datetime
+from typing import Optional
+import uuid
+
+@dataclass
+class Item:
+    id: str = field(default_factory=lambda: str(uuid.uuid4()))
+    name: str = ""
+    description: Optional[str] = None
+    created_at: datetime = field(default_factory=datetime.now)

package/templates/python-fastapi/pro/mvc/app/schemas/item.py.hbs

@@ -0,0 +1,16 @@
+from pydantic import BaseModel
+from datetime import datetime
+from typing import Optional
+
+class ItemCreate(BaseModel):
+    name: str
+    description: Optional[str] = None
+
+class ItemResponse(BaseModel):
+    id: str
+    name: str
+    description: Optional[str] = None
+    created_at: datetime
+    
+    class Config:
+        from_attributes = True

package/templates/python-fastapi/pro/mvc/app/services/item_service.py.hbs

@@ -0,0 +1,24 @@
+from app.models.item import Item
+from app.schemas.item import ItemCreate
+from typing import List, Optional
+
+class ItemService:
+    def __init__(self):
+        self.items: dict[str, Item] = {}
+    
+    def list_items(self) -> List[Item]:
+        return list(self.items.values())
+    
+    def create_item(self, item_data: ItemCreate) -> Item:
+        item = Item(name=item_data.name, description=item_data.description)
+        self.items[item.id] = item
+        return item
+    
+    def get_item(self, item_id: str) -> Optional[Item]:
+        return self.items.get(item_id)
+    
+    def delete_item(self, item_id: str) -> bool:
+        if item_id in self.items:
+            del self.items[item_id]
+            return True
+        return False

package/templates/python-fastapi/pro/mvc/infra/main.tf.hbs

@@ -0,0 +1,83 @@
+# Terraform Infrastructure for {{projectName}}
+
+terraform {
+  required_version = ">= 1.0.0"
+
+  required_providers {
+    aws = {
+      source = "hashicorp/aws"
+      version = "~> 5.0"
+    }
+  }
+
+# Uncomment for remote state (recommended for production)
+# backend "s3" {
+# bucket = "your-terraform-state-bucket"
+# key = "{{projectNameKebabCase}}/terraform.tfstate"
+# region = "us-east-1"
+# encrypt = true
+# dynamodb_table = "terraform-locks"
+# }
+}
+
+provider "aws" {
+  region = var.aws_region
+}
+
+# Variables
+variable "aws_region" {
+  description = "AWS region"
+  type = string
+  default = "us-east-1"
+}
+
+variable "environment" {
+  description = "Environment name (dev, staging, prod)"
+  type = string
+  default = "dev"
+}
+
+variable "app_name" {
+  description = "Application name"
+  type = string
+  default = "{{projectNameKebabCase}}"
+}
+
+# VPC
+module "vpc" {
+  source = "./modules/vpc"
+
+  app_name = var.app_name
+  environment = var.environment
+}
+
+# ECS Cluster
+module "ecs" {
+  source = "./modules/ecs"
+
+  app_name = var.app_name
+  environment = var.environment
+  vpc_id = module.vpc.vpc_id
+  subnet_ids = module.vpc.private_subnet_ids
+}
+
+# RDS PostgreSQL
+module "rds" {
+  source = "./modules/rds"
+
+  app_name = var.app_name
+  environment = var.environment
+  vpc_id = module.vpc.vpc_id
+  subnet_ids = module.vpc.private_subnet_ids
+  security_group_id = module.vpc.db_security_group_id
+}
+
+# Outputs
+output "ecs_cluster_name" {
+  value = module.ecs.cluster_name
+}
+
+output "rds_endpoint" {
+  value = module.rds.endpoint
+  sensitive = true
+}

package/templates/python-fastapi/pro/mvc/infra/modules/ecs/main.tf.hbs

@@ -0,0 +1,54 @@
+# ECS Module
+
+variable "app_name" {
+  type = string
+}
+
+variable "environment" {
+  type = string
+}
+
+variable "vpc_id" {
+  type = string
+}
+
+variable "subnet_ids" {
+  type = list(string)
+}
+
+# ECS Cluster
+resource "aws_ecs_cluster" "main" {
+  name = "${var.app_name}-${var.environment}"
+
+  setting {
+    name = "containerInsights"
+    value = "enabled"
+  }
+
+  tags = {
+    Name = "${var.app_name}-${var.environment}"
+    Environment = var.environment
+  }
+}
+
+# ECS Capacity Provider
+resource "aws_ecs_cluster_capacity_providers" "main" {
+  cluster_name = aws_ecs_cluster.main.name
+
+  capacity_providers = ["FARGATE", "FARGATE_SPOT"]
+
+  default_capacity_provider_strategy {
+    base = 1
+    weight = 100
+    capacity_provider = "FARGATE"
+  }
+}
+
+# Outputs
+output "cluster_name" {
+  value = aws_ecs_cluster.main.name
+}
+
+output "cluster_arn" {
+  value = aws_ecs_cluster.main.arn
+}

package/templates/python-fastapi/pro/mvc/infra/modules/rds/main.tf.hbs

@@ -0,0 +1,88 @@
+# RDS Module
+
+variable "app_name" {
+  type = string
+}
+
+variable "environment" {
+  type = string
+}
+
+variable "vpc_id" {
+  type = string
+}
+
+variable "subnet_ids" {
+  type = list(string)
+}
+
+variable "security_group_id" {
+  type = string
+}
+
+# DB Subnet Group
+resource "aws_db_subnet_group" "main" {
+  name = "${var.app_name}-${var.environment}"
+  subnet_ids = var.subnet_ids
+
+  tags = {
+    Name = "${var.app_name}-${var.environment}"
+    Environment = var.environment
+  }
+}
+
+# RDS PostgreSQL Instance
+resource "aws_db_instance" "main" {
+  identifier = "${var.app_name}-${var.environment}"
+
+  engine = "postgres"
+  engine_version = "16"
+  instance_class = "db.t3.micro"
+
+  allocated_storage = 20
+  max_allocated_storage = 100
+  storage_type = "gp3"
+  storage_encrypted = true
+
+  db_name = replace(var.app_name, "-", "_")
+  username = "postgres"
+  password = random_password.db_password.result
+
+  db_subnet_group_name = aws_db_subnet_group.main.name
+  vpc_security_group_ids = [var.security_group_id]
+
+  backup_retention_period = 7
+  skip_final_snapshot = var.environment != "prod"
+
+  tags = {
+    Name = "${var.app_name}-${var.environment}"
+    Environment = var.environment
+  }
+}
+
+# Random password for DB
+resource "random_password" "db_password" {
+  length = 32
+  special = false
+}
+
+# Store password in SSM
+resource "aws_ssm_parameter" "db_password" {
+  name = "/${var.app_name}/${var.environment}/db-password"
+  description = "Database password for ${var.app_name}"
+  type = "SecureString"
+  value = random_password.db_password.result
+
+  tags = {
+    Environment = var.environment
+  }
+}
+
+# Outputs
+output "endpoint" {
+  value = aws_db_instance.main.endpoint
+}
+
+output "db_name" {
+  value = aws_db_instance.main.db_name
+}