percher 0.4.0 → 0.4.2

package/dist/templates/eleventy/Dockerfile

@@ -0,0 +1,34 @@
+# Multi-stage build: a Bun stage compiles the static bundle, then a
+# minimal Caddy image serves it. This project uses runtime = "docker"
+# (not "static") because Percher's static runtime serves pre-built
+# files only — it does not run a build command. Generated by Percher;
+# safe to edit and own.
+
+# --- Build stage: install deps and build the static bundle -----------
+FROM oven/bun:1-alpine AS build
+WORKDIR /app
+COPY . .
+RUN bun install && bun run build
+
+# --- Serve stage: minimal Caddy image --------------------------------
+# caddy:2-alpine ships /usr/bin/caddy with cap_net_bind_service file
+# caps. Percher runs every container with --security-opt
+# no-new-privileges, which makes execve refuse a cap-bearing binary
+# (an "operation not permitted" crash-loop). Copy Caddy onto a plain
+# alpine base and strip the caps with setcap -r — Caddy never needs
+# the cap here, it listens on :8080 (>= 1024).
+FROM caddy:2-alpine AS caddy-source
+FROM alpine:3.21
+COPY --from=caddy-source /usr/bin/caddy /usr/bin/caddy
+RUN apk add --no-cache libcap \
+ && setcap -r /usr/bin/caddy \
+ && apk del libcap \
+ && rm -rf /var/cache/apk/*
+COPY Caddyfile /etc/caddy/Caddyfile
+COPY --from=build /app/_site /srv
+# HOME points at the writable tmpfs so non-root Caddy can persist its
+# XDG state (storage-clean lock, config autosave) under Percher's
+# read-only root filesystem.
+ENV HOME=/tmp
+EXPOSE 8080
+CMD ["caddy", "run", "--config", "/etc/caddy/Caddyfile", "--adapter", "caddyfile"]

package/dist/templates/eleventy/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "__APP_NAME__",
+  "version": "1.0.0",
+  "private": true,
+  "scripts": {
+    "build": "eleventy",
+    "dev": "eleventy --serve"
+  },
+  "devDependencies": {
+    "@11ty/eleventy": "^3.0.0"
+  }
+}

package/dist/templates/eleventy/percher.toml

@@ -0,0 +1,11 @@
+[app]
+name = "__APP_NAME__"
+runtime = "docker"
+framework = "eleventy"
+
+[web]
+port = 8080
+health = "/"
+
+[data]
+mode = "none"

package/dist/templates/eleventy/src/_includes/base.njk

@@ -0,0 +1,12 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>{{ title or "__APP_NAME__" }}</title>
+    <link rel="stylesheet" href="/assets/style.css" />
+  </head>
+  <body>
+    <main>{{ content | safe }}</main>
+  </body>
+</html>

package/dist/templates/eleventy/src/assets/style.css

@@ -0,0 +1,12 @@
+body {
+  font-family: system-ui, -apple-system, sans-serif;
+  max-width: 640px;
+  margin: 48px auto;
+  padding: 0 24px;
+  line-height: 1.6;
+  color: #222;
+}
+h1 {
+  font-weight: 600;
+  letter-spacing: -0.5px;
+}

package/dist/templates/eleventy/src/index.md

@@ -0,0 +1,10 @@
+---
+layout: base.njk
+title: __APP_NAME__
+---
+
+# __APP_NAME__
+
+Welcome. This is an Eleventy static site deployed on Percher.
+
+Edit `src/index.md` and push — Percher rebuilds and serves the `_site` output.

package/dist/templates/elysia/index.ts

@@ -0,0 +1,8 @@
+import { Elysia } from "elysia";
+
+const app = new Elysia()
+  .get("/health", () => ({ status: "ok" }))
+  .get("/", () => "Hello from __APP_NAME__!")
+  .listen(Number(process.env.PORT ?? 3000));
+
+console.log(`__APP_NAME__ running on :${app.server?.port}`);

package/dist/templates/elysia/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "__APP_NAME__",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "start": "bun run index.ts"
+  },
+  "dependencies": {
+    "elysia": "^1.1.0"
+  }
+}

package/dist/templates/elysia/percher.toml

@@ -0,0 +1,11 @@
+[app]
+name = "__APP_NAME__"
+runtime = "bun"
+framework = "elysia"
+
+[web]
+port = 3000
+health = "/health"
+
+[data]
+mode = "none"

package/dist/templates/express/index.ts

@@ -0,0 +1,16 @@
+import express from "express";
+
+const app = express();
+const port = Number(process.env.PORT ?? 3000);
+
+app.get("/health", (_req, res) => {
+  res.json({ status: "ok" });
+});
+
+app.get("/", (_req, res) => {
+  res.send("Hello from __APP_NAME__!");
+});
+
+app.listen(port, () => {
+  console.log(`Listening on http://localhost:${port}`);
+});

package/dist/templates/express/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "__APP_NAME__",
+  "version": "0.1.0",
+  "private": true,
+  "scripts": {
+    "start": "bun run index.ts"
+  },
+  "dependencies": {
+    "express": "^5.0.0"
+  }
+}

package/dist/templates/express/percher.toml

@@ -0,0 +1,11 @@
+[app]
+name = "__APP_NAME__"
+runtime = "node"
+framework = "express"
+
+[web]
+port = 3000
+health = "/health"
+
+[data]
+mode = "none"

package/dist/templates/fastify/index.ts

@@ -0,0 +1,13 @@
+import Fastify from "fastify";
+
+const app = Fastify({ logger: true });
+
+app.get("/health", async () => ({ status: "ok" }));
+
+app.get("/", async () => ({ hello: "__APP_NAME__" }));
+
+const port = Number(process.env.PORT ?? 3000);
+app.listen({ port, host: "0.0.0.0" }).catch((err) => {
+  app.log.error(err);
+  process.exit(1);
+});

package/dist/templates/fastify/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "__APP_NAME__",
+  "version": "0.1.0",
+  "private": true,
+  "scripts": {
+    "start": "bun run index.ts"
+  },
+  "dependencies": {
+    "fastify": "^5.0.0"
+  }
+}

package/dist/templates/fastify/percher.toml

@@ -0,0 +1,11 @@
+[app]
+name = "__APP_NAME__"
+runtime = "node"
+framework = "fastify"
+
+[web]
+port = 3000
+health = "/health"
+
+[data]
+mode = "none"

package/dist/templates/flask/main.py

@@ -0,0 +1,23 @@
+import os
+from flask import Flask, jsonify
+
+app = Flask(__name__)
+
+
+@app.route("/health")
+def health():
+    return jsonify({"status": "ok"})
+
+
+@app.route("/")
+def index():
+    return f"Hello from __APP_NAME__!"
+
+
+if __name__ == "__main__":
+    port = int(os.environ.get("PORT", 5000))
+    # 0.0.0.0 is required so Flask binds inside the Percher container and
+    # Caddy can route to it. Public exposure is gated by Caddy + the
+    # platform's egress rules, not by the bind address.
+    # nosemgrep: python.flask.security.audit.app-run-param-config.avoid_app_run_with_bad_host
+    app.run(host="0.0.0.0", port=port)

package/dist/templates/flask/percher.toml

@@ -0,0 +1,11 @@
+[app]
+name = "__APP_NAME__"
+runtime = "python"
+framework = "flask"
+
+[web]
+port = 5000
+health = "/health"
+
+[data]
+mode = "none"

package/dist/templates/flask/requirements.txt

@@ -0,0 +1 @@
+flask>=3.0.0

package/dist/templates/go/Dockerfile

@@ -0,0 +1,11 @@
+FROM golang:1.23-alpine AS build
+WORKDIR /src
+COPY go.mod ./
+COPY main.go ./
+RUN CGO_ENABLED=0 go build -ldflags="-s -w" -o /app .
+
+FROM gcr.io/distroless/static-debian12:nonroot
+COPY --from=build /app /app
+EXPOSE 8080
+USER nonroot
+ENTRYPOINT ["/app"]

package/dist/templates/go/go.mod

@@ -0,0 +1,3 @@
+module __APP_NAME__
+
+go 1.23

package/dist/templates/go/main.go

@@ -0,0 +1,53 @@
+package main
+
+import (
+	"fmt"
+	"log"
+	"net/http"
+	"os"
+)
+
+func main() {
+	port := os.Getenv("PORT")
+	if port == "" {
+		port = "8080"
+	}
+
+	http.HandleFunc("/health", func(w http.ResponseWriter, _ *http.Request) {
+		w.Header().Set("Content-Type", "application/json")
+		_, _ = fmt.Fprint(w, `{"ok":true}`)
+	})
+
+	http.HandleFunc("/", func(w http.ResponseWriter, r *http.Request) {
+		if r.URL.Path != "/" {
+			http.NotFound(w, r)
+			return
+		}
+		w.Header().Set("Content-Type", "text/html; charset=utf-8")
+		_, _ = fmt.Fprint(w, `<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <title>__APP_NAME__</title>
+    <style>
+      body { font-family: system-ui, sans-serif; max-width: 640px; margin: 48px auto; padding: 0 24px; line-height: 1.6; }
+      h1 { letter-spacing: -0.5px; }
+    </style>
+  </head>
+  <body>
+    <h1>__APP_NAME__</h1>
+    <p>A Go app deployed on Percher.</p>
+    <p>Add handlers in <code>main.go</code> and push to redeploy.</p>
+  </body>
+</html>`)
+	})
+
+	log.Printf("listening on :%s", port)
+	// Plain HTTP is correct here: Percher's Caddy ingress terminates
+	// TLS in front of the container. The app speaks HTTP on its
+	// internal port and Caddy proxies HTTPS traffic to it.
+	// nosemgrep: go.lang.security.audit.net.use-tls.use-tls
+	if err := http.ListenAndServe(":"+port, nil); err != nil {
+		log.Fatal(err)
+	}
+}

package/dist/templates/go/percher.toml

@@ -0,0 +1,11 @@
+[app]
+name = "__APP_NAME__"
+runtime = "docker"
+framework = "go"
+
+[web]
+port = 8080
+health = "/health"
+
+[data]
+mode = "none"

package/dist/templates/hono/index.ts

@@ -0,0 +1,12 @@
+import { Hono } from "hono";
+
+const app = new Hono();
+
+app.get("/health", (c) => c.json({ status: "ok" }));
+
+app.get("/", (c) => c.text("Hello from __APP_NAME__!"));
+
+export default {
+  port: Number(process.env.PORT ?? 3000),
+  fetch: app.fetch,
+};

package/dist/templates/hono/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "__APP_NAME__",
+  "version": "0.1.0",
+  "private": true,
+  "scripts": {
+    "start": "bun run index.ts"
+  },
+  "dependencies": {
+    "hono": "^4.0.0"
+  }
+}

package/dist/templates/hono/percher.toml

@@ -0,0 +1,11 @@
+[app]
+name = "__APP_NAME__"
+runtime = "node"
+framework = "hono"
+
+[web]
+port = 3000
+health = "/health"
+
+[data]
+mode = "none"

package/dist/templates/htmx/index.ts

@@ -0,0 +1,32 @@
+import express from "express";
+
+const app = express();
+const port = Number(process.env.PORT ?? 3000);
+
+app.get("/health", (_req, res) => res.json({ status: "ok" }));
+
+app.get("/", (_req, res) => {
+  res.type("html").send(`<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <title>__APP_NAME__</title>
+    <script src="https://unpkg.com/htmx.org@2.0.2"></script>
+  </head>
+  <body style="font-family: system-ui; padding: 40px;">
+    <h1>Hello from __APP_NAME__</h1>
+    <p>Express + HTMX on Percher. No build step, just server-rendered HTML fragments.</p>
+    <button hx-get="/click" hx-swap="outerHTML" style="font-size: 16px; padding: 10px 20px;">
+      Click me
+    </button>
+  </body>
+</html>`);
+});
+
+app.get("/click", (_req, res) => {
+  res
+    .type("html")
+    .send(`<p><strong>Hello back.</strong> Swapped at ${new Date().toISOString()}.</p>`);
+});
+
+app.listen(port, () => console.log(`__APP_NAME__ listening on :${port}`));

package/dist/templates/htmx/package.json

@@ -0,0 +1,15 @@
+{
+  "name": "__APP_NAME__",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "start": "bun run index.ts"
+  },
+  "dependencies": {
+    "express": "^4.19.0"
+  },
+  "devDependencies": {
+    "@types/express": "^4.17.0"
+  }
+}

package/dist/templates/htmx/percher.toml

@@ -0,0 +1,11 @@
+[app]
+name = "__APP_NAME__"
+runtime = "node"
+framework = "express"
+
+[web]
+port = 3000
+health = "/health"
+
+[data]
+mode = "none"

package/dist/templates/hugo/Caddyfile

@@ -0,0 +1,6 @@
+:8080 {
+	bind 0.0.0.0
+	root * /srv
+	encode gzip zstd
+	file_server
+}

package/dist/templates/hugo/Dockerfile

@@ -0,0 +1,32 @@
+# Multi-stage build: Hugo compiles the site, then a minimal Caddy
+# image serves it. runtime = "docker" because Percher's static runtime
+# serves pre-built files only — it does not run Hugo. Edit and own freely.
+
+# --- Build stage: compile the Hugo site ------------------------------
+FROM hugomods/hugo:exts-0.139.4 AS build
+WORKDIR /site
+COPY . .
+RUN hugo --minify
+
+# --- Serve stage: minimal Caddy image --------------------------------
+# caddy:2-alpine ships /usr/bin/caddy with cap_net_bind_service file
+# caps. Percher runs every container with --security-opt
+# no-new-privileges, which makes execve refuse a cap-bearing binary
+# (an "operation not permitted" crash-loop). Copy Caddy onto a plain
+# alpine base and strip the caps with setcap -r — Caddy never needs
+# the cap here, it listens on :8080 (>= 1024).
+FROM caddy:2-alpine AS caddy-source
+FROM alpine:3.21
+COPY --from=caddy-source /usr/bin/caddy /usr/bin/caddy
+RUN apk add --no-cache libcap \
+ && setcap -r /usr/bin/caddy \
+ && apk del libcap \
+ && rm -rf /var/cache/apk/*
+COPY Caddyfile /etc/caddy/Caddyfile
+COPY --from=build /site/public /srv
+# HOME points at the writable tmpfs so non-root Caddy can persist its
+# XDG state (storage-clean lock, config autosave) under Percher's
+# read-only root filesystem.
+ENV HOME=/tmp
+EXPOSE 8080
+CMD ["caddy", "run", "--config", "/etc/caddy/Caddyfile", "--adapter", "caddyfile"]

package/dist/templates/hugo/content/_index.md

@@ -0,0 +1,7 @@
+---
+title: "__APP_NAME__"
+---
+
+# __APP_NAME__
+
+A Hugo site deployed on Percher. Edit `content/_index.md` and push.

package/dist/templates/hugo/hugo.toml

@@ -0,0 +1,11 @@
+baseURL = "/"
+title = "__APP_NAME__"
+languageCode = "en-us"
+
+[params]
+  description = "__APP_NAME__ on Percher"
+
+[markup]
+  [markup.goldmark]
+    [markup.goldmark.renderer]
+      unsafe = true

package/dist/templates/hugo/layouts/index.html

@@ -0,0 +1,22 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>{{ .Site.Title }}</title>
+    <style>
+      body {
+        font-family: system-ui, -apple-system, sans-serif;
+        max-width: 640px;
+        margin: 48px auto;
+        padding: 0 24px;
+        line-height: 1.6;
+        color: #222;
+      }
+      h1 { font-weight: 600; letter-spacing: -0.5px; }
+    </style>
+  </head>
+  <body>
+    <main>{{ .Content }}</main>
+  </body>
+</html>

package/dist/templates/hugo/percher.toml

@@ -0,0 +1,11 @@
+[app]
+name = "__APP_NAME__"
+runtime = "docker"
+framework = "hugo"
+
+[web]
+port = 8080
+health = "/"
+
+[data]
+mode = "none"

package/dist/templates/java/Dockerfile

@@ -0,0 +1,15 @@
+FROM eclipse-temurin:21-jdk-alpine AS build
+WORKDIR /src
+COPY Main.java ./
+# -d emits class files under /build so the runtime stage can copy the
+# whole compiled tree in one COPY (picks up Main.class plus the
+# Main$HealthHandler / Main$RootHandler inner-class files).
+RUN mkdir -p /build && javac -d /build Main.java
+
+FROM eclipse-temurin:21-jre-alpine
+RUN addgroup -S app && adduser -S app -G app
+WORKDIR /app
+COPY --from=build --chown=app:app /build/ ./
+USER app
+EXPOSE 8080
+ENTRYPOINT ["java", "Main"]

package/dist/templates/java/Main.java

@@ -0,0 +1,77 @@
+import com.sun.net.httpserver.HttpExchange;
+import com.sun.net.httpserver.HttpHandler;
+import com.sun.net.httpserver.HttpServer;
+
+import java.io.IOException;
+import java.io.OutputStream;
+import java.net.InetSocketAddress;
+import java.nio.charset.StandardCharsets;
+
+public class Main {
+    public static void main(String[] args) throws IOException {
+        String portEnv = System.getenv("PORT");
+        int port = 8080;
+        if (portEnv != null && !portEnv.isEmpty()) {
+            try {
+                port = Integer.parseInt(portEnv);
+            } catch (NumberFormatException ignored) {
+                // fall back to 8080
+            }
+        }
+
+        HttpServer server = HttpServer.create(new InetSocketAddress(port), 0);
+        server.createContext("/health", new HealthHandler());
+        server.createContext("/", new RootHandler());
+        server.setExecutor(null);
+        System.out.println("listening on :" + port);
+        server.start();
+    }
+
+    static class HealthHandler implements HttpHandler {
+        @Override
+        public void handle(HttpExchange exchange) throws IOException {
+            byte[] body = "{\"ok\":true}".getBytes(StandardCharsets.UTF_8);
+            exchange.getResponseHeaders().set("Content-Type", "application/json");
+            exchange.sendResponseHeaders(200, body.length);
+            try (OutputStream os = exchange.getResponseBody()) {
+                os.write(body);
+            }
+        }
+    }
+
+    static class RootHandler implements HttpHandler {
+        @Override
+        public void handle(HttpExchange exchange) throws IOException {
+            if (!"/".equals(exchange.getRequestURI().getPath())) {
+                byte[] notFound = "Not Found".getBytes(StandardCharsets.UTF_8);
+                exchange.sendResponseHeaders(404, notFound.length);
+                try (OutputStream os = exchange.getResponseBody()) {
+                    os.write(notFound);
+                }
+                return;
+            }
+            String html = "<!doctype html>\n"
+                + "<html lang=\"en\">\n"
+                + "  <head>\n"
+                + "    <meta charset=\"utf-8\" />\n"
+                + "    <title>__APP_NAME__</title>\n"
+                + "    <style>\n"
+                + "      body { font-family: system-ui, sans-serif; max-width: 640px; margin: 48px auto; padding: 0 24px; line-height: 1.6; }\n"
+                + "      h1 { letter-spacing: -0.5px; }\n"
+                + "    </style>\n"
+                + "  </head>\n"
+                + "  <body>\n"
+                + "    <h1>__APP_NAME__</h1>\n"
+                + "    <p>A Java app deployed on Percher.</p>\n"
+                + "    <p>Add handlers in <code>Main.java</code> and push to redeploy.</p>\n"
+                + "  </body>\n"
+                + "</html>";
+            byte[] body = html.getBytes(StandardCharsets.UTF_8);
+            exchange.getResponseHeaders().set("Content-Type", "text/html; charset=utf-8");
+            exchange.sendResponseHeaders(200, body.length);
+            try (OutputStream os = exchange.getResponseBody()) {
+                os.write(body);
+            }
+        }
+    }
+}

package/dist/templates/java/percher.toml

@@ -0,0 +1,11 @@
+[app]
+name = "__APP_NAME__"
+runtime = "docker"
+framework = "java"
+
+[web]
+port = 8080
+health = "/health"
+
+[data]
+mode = "none"

package/dist/templates/laravel/Dockerfile

@@ -0,0 +1,15 @@
+FROM composer:2 AS vendor
+WORKDIR /app
+COPY composer.json ./
+RUN composer install --no-dev --no-scripts --no-autoloader --prefer-dist
+
+FROM php:8.3-cli-alpine
+WORKDIR /app
+RUN addgroup -S app && adduser -S app -G app
+COPY --from=vendor --chown=app:app /app/vendor ./vendor
+COPY --chown=app:app . .
+RUN composer dump-autoload --no-dev --optimize 2>/dev/null || true \
+ && chown -R app:app /app
+USER app
+EXPOSE 8000
+CMD ["php", "-S", "0.0.0.0:8000", "-t", "public", "public/index.php"]