underpost 2.99.4 → 2.99.6

package/src/server/cron.js

@@ -4,7 +4,6 @@
  * @namespace UnderpostCron
  */
 
-import { Cmd } from './conf.js';
 import { loggerFactory } from './logger.js';
 import { shellExec } from './process.js';
 import fs from 'fs-extra';
@@ -12,68 +11,192 @@ import Underpost from '../index.js';
 
 const logger = loggerFactory(import.meta);
 
+const volumeHostPath = '/home/dd';
+const enginePath = '/home/dd/engine';
+const cronVolumeName = 'underpost-cron-container-volume';
+
+/**
+ * Generates a Kubernetes CronJob YAML manifest string.
+ *
+ * @param {Object} params - CronJob parameters
+ * @param {string} params.name - CronJob name (max 52 chars, sanitized to DNS subdomain)
+ * @param {string} params.expression - Cron schedule expression (e.g., '0 0 * * *')
+ * @param {string} params.deployList - Comma-separated deploy IDs for the cron CLI
+ * @param {string} params.jobList - Comma-separated job IDs (e.g., 'dns', 'backup')
+ * @param {string} [params.image] - Container image (defaults to underpost/underpost-engine:<version>)
+ * @param {string} [params.namespace='default'] - Kubernetes namespace
+ * @param {boolean} [params.git=false] - Pass --git flag to cron CLI
+ * @param {boolean} [params.dev=false] - Use local ./ base path instead of global underpost installation
+ * @param {string} [params.cmd] - Optional pre-script commands to run before cron execution
+ * @param {boolean} [params.suspend=false] - Whether the CronJob is suspended
+ * @param {boolean} [params.dryRun=false] - Pass --dry-run flag to the cron command inside the container
+ * @returns {string} Kubernetes CronJob YAML manifest
+ * @memberof UnderpostCron
+ */
+const cronJobYamlFactory = ({
+  name,
+  expression,
+  deployList,
+  jobList,
+  image,
+  namespace = 'default',
+  git = false,
+  dev = false,
+  cmd,
+  suspend = false,
+  dryRun = false,
+}) => {
+  const containerImage = image || `underpost/underpost-engine:${Underpost.version}`;
+
+  const sanitizedName = name
+    .toLowerCase()
+    .replace(/[^a-z0-9-]/g, '-')
+    .replace(/--+/g, '-')
+    .replace(/^-|-$/g, '')
+    .substring(0, 52);
+
+  const cmdPart = cmd ? `${cmd} && ` : '';
+  const cronBin = dev ? 'node bin' : 'underpost';
+  const flags = `${git ? '--git ' : ''}${dev ? '--dev ' : ''}${dryRun ? '--dry-run ' : ''}`;
+  const cronCommand = `${cmdPart}${cronBin} cron ${flags}${deployList} ${jobList}`;
+
+  return `apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: ${sanitizedName}
+  namespace: ${namespace}
+  labels:
+    app: ${sanitizedName}
+    managed-by: underpost
+spec:
+  schedule: "${expression}"
+  concurrencyPolicy: Forbid
+  startingDeadlineSeconds: 200
+  successfulJobsHistoryLimit: 3
+  failedJobsHistoryLimit: 1
+  suspend: ${suspend}
+  jobTemplate:
+    spec:
+      template:
+        metadata:
+          labels:
+            app: ${sanitizedName}
+            managed-by: underpost
+        spec:
+          containers:
+            - name: ${sanitizedName}
+              image: ${containerImage}
+              command:
+                - /bin/sh
+                - -c
+                - >
+                  ${cronCommand}
+              volumeMounts:
+                - mountPath: ${enginePath}
+                  name: ${cronVolumeName}
+          volumes:
+            - hostPath:
+                path: ${enginePath}
+                type: Directory
+              name: ${cronVolumeName}
+          restartPolicy: OnFailure
+`;
+};
+
+/**
+ * Syncs the engine directory into the kind-worker container node.
+ * Required for kind clusters where worker nodes don't share the host filesystem.
+ *
+ * @memberof UnderpostCron
+ */
+const syncEngineToKindWorker = () => {
+  logger.info('Syncing engine volume to kind-worker node');
+  shellExec(`docker exec -i kind-worker bash -c "rm -rf ${volumeHostPath}"`);
+  shellExec(`docker exec -i kind-worker bash -c "mkdir -p ${volumeHostPath}"`);
+  shellExec(`docker cp ${volumeHostPath}/engine kind-worker:${volumeHostPath}/engine`);
+  shellExec(
+    `docker exec -i kind-worker bash -c "chown -R 1000:1000 ${volumeHostPath}; chmod -R 755 ${volumeHostPath}"`,
+  );
+};
+
+/**
+ * Resolves the deploy-id to use for cron job generation.
+ * When deployId is provided directly, uses it. Otherwise reads from dd.cron file.
+ *
+ * @param {string} [deployId] - Explicit deploy-id override
+ * @memberof UnderpostCron
+ * @returns {string|null} Resolved deploy-id or null if not found
+ */
+const resolveDeployId = (deployId) => {
+  if (deployId) return deployId;
+
+  const cronDeployFilePath = './engine-private/deploy/dd.cron';
+  if (!fs.existsSync(cronDeployFilePath)) {
+    return null;
+  }
+  return fs.readFileSync(cronDeployFilePath, 'utf8').trim();
+};
+
 /**
  * UnderpostCron main module methods
  * @class UnderpostCron
  * @memberof UnderpostCron
  */
 class UnderpostCron {
-  /**
-   * Get the JOB static member
-   * @static
-   * @type {Object}
-   * @memberof UnderpostCron
-   */
+  /** @returns {Object} Available cron job handlers */
   static get JOB() {
     return {
-      /**
-       * DNS cli API
-       * @static
-       * @type {Dns}
-       * @memberof UnderpostCron
-       */
       dns: Underpost.dns,
-      /**
-       * BackUp cli API
-       * @static
-       * @type {BackUp}
-       * @memberof UnderpostCron
-       */
       backup: Underpost.backup,
     };
   }
 
   static API = {
     /**
-     * Run the cron jobs
-     * @static
-     * @param {String} deployList - Comma separated deploy ids
-     * @param {String} jobList - Comma separated job ids
-     * @param {Object} options - Options for cron execution
-     * @return {void}
+     * CLI entry point for the `underpost cron` command.
+     *
+     * @param {string} deployList - Comma-separated deploy IDs
+     * @param {string} jobList - Comma-separated job IDs
+     * @param {Object} options - CLI flags
+     * @param {boolean} [options.generateK8sCronjobs] - Generate K8s CronJob YAML manifests
+     * @param {boolean} [options.apply] - Apply manifests to the cluster
+     * @param {boolean} [options.git] - Pass --git to job execution
+     * @param {boolean} [options.dev] - Use local ./ base path instead of global underpost installation
+     * @param {string}  [options.cmd] - Optional pre-script commands to run before cron execution
+     * @param {string}  [options.namespace] - Kubernetes namespace
+     * @param {string}  [options.image] - Custom container image
+     * @param {string}  [options.setupStart] - Deploy-id to setup: updates its package.json start and generates+applies cron jobs
+     * @param {boolean} [options.k3s] - Use k3s cluster context (apply directly on host)
+     * @param {boolean} [options.kind] - Use kind cluster context (apply via kind-worker container)
+     * @param {boolean} [options.kubeadm] - Use kubeadm cluster context (apply directly on host)
+     * @param {boolean} [options.dryRun] - Preview cron jobs without executing them
+     * @param {boolean} [options.createJobNow] - After applying, immediately create a Job from each CronJob (requires --apply)
      * @memberof UnderpostCron
      */
     callback: async function (
       deployList = 'default',
       jobList = Object.keys(Underpost.cron.JOB).join(','),
-      options = { initPm2Cronjobs: false, git: false, updatePackageScripts: false },
+      options = {},
     ) {
-      if (options.updatePackageScripts === true) {
-        await Underpost.cron.updatePackageScripts(deployList);
+      if (options.setupStart) {
+        await Underpost.cron.setupDeployStart(options.setupStart, options);
         return;
       }
 
-      if (options.initPm2Cronjobs === true) {
-        await Underpost.cron.initCronJobs(options);
+      if (options.generateK8sCronjobs) {
+        await Underpost.cron.generateK8sCronJobs(options);
         return;
       }
 
-      // Execute the requested jobs
       for (const _jobId of jobList.split(',')) {
         const jobId = _jobId.trim();
         if (Underpost.cron.JOB[jobId]) {
-          logger.info(`Executing cron job: ${jobId}`);
-          await Underpost.cron.JOB[jobId].callback(deployList, options);
+          if (options.dryRun) {
+            logger.info(`[dry-run] Would execute cron job`, { jobId, deployList, options });
+          } else {
+            logger.info(`Executing cron job`, { jobId, deployList, options });
+            await Underpost.cron.JOB[jobId].callback(deployList, options);
+          }
         } else {
           logger.warn(`Unknown cron job: ${jobId}`);
         }
@@ -81,140 +204,225 @@ class UnderpostCron {
     },
 
     /**
-     * Initialize PM2 cron jobs from configuration
-     * @static
-     * @param {Object} options - Initialization options
+     * Update the package.json start script for the given deploy-id and generate+apply its K8s CronJob manifests.
+     *
+     * @param {string} deployId - The deploy-id whose package.json will be updated
+     * @param {Object} [options] - Additional options forwarded to generateK8sCronJobs
+     * @param {boolean} [options.createJobNow] - After applying, immediately create a Job from each CronJob
+     * @param {boolean} [options.dryRun] - Pass --dry-run=client to kubectl commands
+     * @param {boolean} [options.apply] - Whether to apply generated manifests to the cluster
+     * @param {boolean} [options.git] - Pass --git flag to cron CLI commands
+     * @param {boolean} [options.dev] - Use local ./ base path instead of global underpost installation
+     * @param {string}  [options.cmd] - Optional pre-script commands to run before cron execution
+     * @param {string}  [options.namespace] - Kubernetes namespace for the CronJobs
+     * @param {string}  [options.image] - Custom container image override for the CronJobs
+     * @param {boolean} [options.k3s] - k3s cluster context (apply directly on host)
+     * @param {boolean} [options.kind] - kind cluster context (apply via kind-worker container)
+     * @param {boolean} [options.kubeadm] - kubeadm cluster context (apply directly on host)
      * @memberof UnderpostCron
      */
-    initCronJobs: async function (options = { git: false }) {
-      logger.info('Initializing PM2 cron jobs');
-
-      // Read cron job deployment ID from dd.cron file (e.g., "dd-cron")
-      const jobDeployId = fs.readFileSync('./engine-private/deploy/dd.cron', 'utf8').trim();
-      const confCronPath = `./engine-private/conf/${jobDeployId}/conf.cron.json`;
+    setupDeployStart: async function (deployId, options = {}) {
+      if (!deployId || deployId === true) deployId = resolveDeployId();
+      const confDir = `./engine-private/conf/${deployId}`;
+      const packageJsonPath = `${confDir}/package.json`;
+      const confCronPath = `${confDir}/conf.cron.json`;
 
       if (!fs.existsSync(confCronPath)) {
-        logger.warn(`Cron configuration not found: ${confCronPath}`);
+        logger.warn(`conf.cron.json not found for deploy-id: ${deployId}`, { path: confCronPath });
         return;
       }
 
-      const confCronConfig = JSON.parse(fs.readFileSync(confCronPath, 'utf8'));
+      const confCron = JSON.parse(fs.readFileSync(confCronPath, 'utf8'));
 
-      if (!confCronConfig.jobs || Object.keys(confCronConfig.jobs).length === 0) {
-        logger.info('No cron jobs configured');
+      if (!confCron.jobs || Object.keys(confCron.jobs).length === 0) {
+        logger.warn(`No cron jobs configured for deploy-id: ${deployId}`);
         return;
       }
 
-      // Delete all existing cron jobs
-      for (const job of Object.keys(confCronConfig.jobs)) {
-        const name = `${jobDeployId}-${job}`;
-        logger.info(`Removing existing PM2 process: ${name}`);
-        shellExec(Cmd.delete(name));
+      const hasEnabledJobs = Object.values(confCron.jobs).some((job) => job.enabled !== false);
+      if (!hasEnabledJobs) {
+        logger.warn(`No enabled cron jobs for deploy-id: ${deployId}`);
+        return;
       }
 
-      // Create PM2 cron jobs for each configured job
-      for (const job of Object.keys(confCronConfig.jobs)) {
-        const jobConfig = confCronConfig.jobs[job];
-
-        if (jobConfig.enabled === false) {
-          logger.info(`Skipping disabled job: ${job}`);
-          continue;
-        }
-
-        const name = `${jobDeployId}-${job}`;
-        const deployIdList = Underpost.cron.getRelatedDeployIdList(job);
-        const expression = jobConfig.expression || '0 0 * * *'; // Default: daily at midnight
-        const instances = jobConfig.instances || 1; // Default: 1 instance
-
-        logger.info(`Creating PM2 cron job: ${name} with expression: ${expression}, instances: ${instances}`);
-        shellExec(Cmd.cron(deployIdList, job, name, expression, options, instances));
+      // Update package.json start script
+      if (fs.existsSync(packageJsonPath)) {
+        const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf8'));
+        let startCommand = 'echo "Starting cron jobs..."';
+        for (const job of Object.keys(confCron.jobs))
+          startCommand += ` && kubectl apply -f ./manifests/cronjobs/${deployId}/${deployId}-${job}.yaml`;
+        if (!packageJson.scripts) packageJson.scripts = {};
+        packageJson.scripts.start = startCommand;
+
+        fs.writeFileSync(packageJsonPath, JSON.stringify(packageJson, null, 4) + '\n', 'utf8');
+        logger.info(`Updated package.json start script for ${deployId}`, { path: packageJsonPath });
+      } else {
+        logger.warn(`package.json not found for deploy-id: ${deployId}`, { path: packageJsonPath });
       }
 
-      logger.info('PM2 cron jobs initialization completed');
+      // Generate and apply cron job manifests for this deploy-id
+      await Underpost.cron.generateK8sCronJobs({
+        deployId,
+        apply: options.apply,
+        git: !!options.git,
+        dev: !!options.dev,
+        cmd: options.cmd,
+        namespace: options.namespace,
+        image: options.image,
+        k3s: !!options.k3s,
+        kind: !!options.kind,
+        kubeadm: !!options.kubeadm,
+        createJobNow: !!options.createJobNow,
+        dryRun: !!options.dryRun,
+      });
     },
 
     /**
-     * Update package.json start scripts for specified deploy-ids
-     * @static
-     * @param {String} deployList - Comma separated deploy ids
+     * Generate Kubernetes CronJob YAML manifests from conf.cron.json configuration.
+     * Each enabled job produces one CronJob YAML file under manifests/cronjobs/<deployId>/.
+     * With --apply the manifests are also applied to the cluster via kubectl.
+     *
+     * @param {Object} options
+     * @param {string}  [options.deployId] - Explicit deploy-id (overrides dd.cron file lookup)
+     * @param {boolean} [options.git=false] - Pass --git flag to cron CLI commands
+     * @param {boolean} [options.dev=false] - Use local ./ base path instead of global underpost
+     * @param {string}  [options.cmd] - Optional pre-script commands
+     * @param {boolean} [options.apply=false] - kubectl apply generated manifests
+     * @param {string}  [options.namespace='default'] - Target Kubernetes namespace
+     * @param {string}  [options.image] - Custom container image override
+     * @param {boolean} [options.k3s=false] - k3s cluster context (apply directly on host)
+     * @param {boolean} [options.kind=false] - kind cluster context (apply via kind-worker container)
+     * @param {boolean} [options.kubeadm=false] - kubeadm cluster context (apply directly on host)
+     * @param {boolean} [options.createJobNow=false] - After applying, create a Job from each CronJob immediately
+     * @param {boolean} [options.dryRun=false] - Pass --dry-run=client to kubectl commands
      * @memberof UnderpostCron
      */
-    updatePackageScripts: async function (deployList = 'default') {
-      logger.info('Updating package.json start scripts for deploy-id configurations');
+    generateK8sCronJobs: async function (options = {}) {
+      const namespace = options.namespace || 'default';
+      const jobDeployId = resolveDeployId(options.deployId);
+
+      if (!jobDeployId) {
+        logger.warn(
+          'Could not resolve deploy-id. Provide --setup-start <deploy-id> or create engine-private/deploy/dd.cron',
+        );
+        return;
+      }
+
+      const confCronPath = `./engine-private/conf/${jobDeployId}/conf.cron.json`;
 
-      // Resolve deploy list
-      if ((!deployList || deployList === 'dd') && fs.existsSync(`./engine-private/deploy/dd.router`)) {
-        deployList = fs.readFileSync(`./engine-private/deploy/dd.router`, 'utf8').trim();
+      if (!fs.existsSync(confCronPath)) {
+        logger.warn(`Cron configuration not found: ${confCronPath}`);
+        return;
       }
 
-      const confDir = './engine-private/conf';
-      if (!fs.existsSync(confDir)) {
-        logger.warn(`Configuration directory not found: ${confDir}`);
+      const confCronConfig = JSON.parse(fs.readFileSync(confCronPath, 'utf8'));
+
+      if (!confCronConfig.jobs || Object.keys(confCronConfig.jobs).length === 0) {
+        logger.info('No cron jobs configured');
         return;
       }
 
-      // Parse deploy list into array
-      const deployIds = deployList
-        .split(',')
-        .map((id) => id.trim())
-        .filter((id) => id);
+      const outputDir = `./manifests/cronjobs/${jobDeployId}`;
+      fs.mkdirSync(outputDir, { recursive: true });
 
-      for (const deployId of deployIds) {
-        const packageJsonPath = `${confDir}/${deployId}/package.json`;
-        const confCronPath = `${confDir}/${deployId}/conf.cron.json`;
+      const generatedFiles = [];
 
-        // Only update if both package.json and conf.cron.json exist
-        if (!fs.existsSync(packageJsonPath)) {
-          logger.info(`Skipping ${deployId}: package.json not found`);
-          continue;
-        }
+      for (const job of Object.keys(confCronConfig.jobs)) {
+        const jobConfig = confCronConfig.jobs[job];
 
-        if (!fs.existsSync(confCronPath)) {
-          logger.info(`Skipping ${deployId}: conf.cron.json not found`);
+        if (jobConfig.enabled === false) {
+          logger.info(`Skipping disabled job: ${job}`);
           continue;
         }
 
-        const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf8'));
-        const confCron = JSON.parse(fs.readFileSync(confCronPath, 'utf8'));
-
-        // Build start script based on cron jobs configuration
-        if (confCron.jobs && Object.keys(confCron.jobs).length > 0) {
-          const hasEnabledJobs = Object.values(confCron.jobs).some((job) => job.enabled !== false);
+        const deployIdList = Underpost.cron.getRelatedDeployIdList(job);
+        const expression = jobConfig.expression || '0 0 * * *';
+        const cronJobName = `${jobDeployId}-${job}`;
+
+        const yamlContent = cronJobYamlFactory({
+          name: cronJobName,
+          expression,
+          deployList: deployIdList,
+          jobList: job,
+          image: options.image,
+          namespace,
+          git: !!options.git,
+          dev: !!options.dev,
+          cmd: options.cmd,
+          suspend: false,
+          dryRun: !!options.dryRun,
+        });
+
+        const yamlFilePath = `${outputDir}/${cronJobName}.yaml`;
+        fs.writeFileSync(yamlFilePath, yamlContent, 'utf8');
+        generatedFiles.push(yamlFilePath);
+
+        logger.info(`Generated CronJob manifest: ${yamlFilePath}`, { job, expression, namespace });
+      }
 
-          if (hasEnabledJobs) {
-            // Update start script with PM2 cron jobs initialization
-            const startScript = 'pm2 flush && pm2 reloadLogs && node bin cron --init-pm2-cronjobs --git';
+      if (options.apply) {
+        // Delete existing CronJobs before applying new ones
+        for (const job of Object.keys(confCronConfig.jobs)) {
+          const cronJobName = `${jobDeployId}-${job}`;
+          shellExec(`kubectl delete cronjob ${cronJobName} --namespace=${namespace} --ignore-not-found`);
+        }
 
-            if (!packageJson.scripts) {
-              packageJson.scripts = {};
-            }
+        // Ensure default dockerhub image is loaded on the cluster when no custom image is provided
+        if (!options.image) {
+          logger.info('Ensuring default image is loaded on cluster');
+          Underpost.image.pullDockerHubImage({
+            dockerhubImage: 'underpost',
+            kind: !!options.kind,
+            k3s: !!options.k3s,
+            kubeadm: !!options.kubeadm,
+            dev: !!options.dev,
+          });
+        }
 
-            packageJson.scripts.start = startScript;
+        // Sync engine volume to kind-worker node if using kind cluster
+        if (options.kind) {
+          syncEngineToKindWorker();
+        }
 
-            // Write updated package.json
-            fs.writeFileSync(packageJsonPath, JSON.stringify(packageJson, null, 4) + '\n', 'utf8');
-            logger.info(`Updated package.json for ${deployId} with cron start script`);
-          } else {
-            logger.info(`Skipping ${deployId}: no enabled cron jobs`);
+        for (const yamlFile of generatedFiles) {
+          logger.info(`Applying: ${yamlFile}`);
+          shellExec(`kubectl apply -f ${yamlFile}`);
+        }
+        logger.info('All CronJob manifests applied');
+
+        // Create an immediate Job from each CronJob if requested
+        if (options.createJobNow) {
+          for (const job of Object.keys(confCronConfig.jobs)) {
+            const jobConfig = confCronConfig.jobs[job];
+            if (jobConfig.enabled === false) continue;
+
+            const cronJobName = `${jobDeployId}-${job}`
+              .toLowerCase()
+              .replace(/[^a-z0-9-]/g, '-')
+              .replace(/--+/g, '-')
+              .replace(/^-|-$/g, '')
+              .substring(0, 52);
+
+            const immediateJobName = `${cronJobName}-now-${Date.now()}`.substring(0, 63);
+            logger.info(`Creating immediate Job from CronJob: ${cronJobName}`, { jobName: immediateJobName });
+            shellExec(`kubectl create job ${immediateJobName} --from=cronjob/${cronJobName} -n ${namespace}`);
           }
-        } else {
-          logger.info(`Skipping ${deployId}: no cron jobs configured`);
+          logger.info('All immediate Jobs created');
         }
+      } else {
+        logger.info(`Manifests generated in ${outputDir}. Use --apply to deploy to the cluster.`);
       }
-
-      logger.info('Package.json start scripts update completed');
     },
 
     /**
-     * Get the related deploy id list for the given job id
-     * @static
-     * @param {String} jobId - The job id (e.g., 'dns', 'backup')
-     * @return {String} Comma-separated list of deploy ids to process
+     * Resolve the deploy-id list associated with a given job.
+     * Backup jobs read from dd.router (multiple deploy-ids); others from dd.cron.
+     *
+     * @param {string} jobId - Job identifier (e.g., 'dns', 'backup')
+     * @returns {string} Comma-separated deploy IDs
      * @memberof UnderpostCron
      */
     getRelatedDeployIdList(jobId) {
-      // Backup job uses dd.router file (contains multiple deploy-ids)
-      // Other jobs use dd.cron file (contains single deploy-id)
       const deployFilePath =
         jobId === 'backup' ? './engine-private/deploy/dd.router' : './engine-private/deploy/dd.cron';
 
@@ -225,30 +433,31 @@ class UnderpostCron {
           : 'dd-cron';
       }
 
-      // Return the deploy-id list from the file (may be single or comma-separated)
       return fs.readFileSync(deployFilePath, 'utf8').trim();
     },
 
     /**
-     * Get the JOB static object
-     * @static
-     * @type {Object}
+     * Get the available cron job handlers.
+     * Each handler should have a callback function that executes the job logic.
      * @memberof UnderpostCron
+     * @returns {Object} Available cron job handlers
      */
     get JOB() {
       return UnderpostCron.JOB;
     },
 
     /**
-     * Get the list of available job IDs
-     * @static
-     * @return {Array<String>} List of job IDs
+     * Get the list of available job IDs.
+     * This is derived from the keys of the JOB object.
      * @memberof UnderpostCron
+     * @returns {string[]} List of available job IDs
      */
-    getJobsIDs: function () {
+    getJobsIDs() {
       return Object.keys(UnderpostCron.JOB);
     },
   };
 }
 
 export default UnderpostCron;
+
+export { cronJobYamlFactory, resolveDeployId };

package/src/server/dns.js

@@ -13,6 +13,8 @@ import dns from 'node:dns';
 import os from 'node:os';
 import { shellExec, pbcopy } from './process.js';
 import Underpost from '../index.js';
+import { writeEnv } from './conf.js';
+import { resolveDeployId } from './cron.js';
 
 dotenv.config();
 
@@ -328,6 +330,14 @@ class Dns {
             logger.info('IP updated successfully and verified', testIp);
             Underpost.env.set('ip', testIp);
             Underpost.env.delete('monitor-input');
+            {
+              const deployId = resolveDeployId();
+              const envs = dotenv.parse(
+                fs.readFileSync(`./engine-private/conf/${deployId}/.env.${process.env.NODE_ENV}`, 'utf8'),
+              );
+              envs.ip = testIp;
+              writeEnv(`./engine-private/conf/${deployId}/.env.${process.env.NODE_ENV}`, envs);
+            }
           } else {
             logger.error('IP not updated or verification failed', { expected: testIp, received: verifyIp });
           }