underpost 3.2.0 → 3.2.3

package/.github/workflows/publish.ci.yml

@@ -66,3 +66,10 @@ jobs:
           npm publish
         env:
           NODE_AUTH_TOKEN: ${{ secrets.GIT_AUTH_TOKEN }}
+
+  # Release deploy — triggers release.cd.yml after Docker build succeeds
+  deploy-release:
+    needs: build-and-publish
+    if: always() && needs.build-and-publish.result == 'success'
+    uses: ./.github/workflows/release.cd.yml
+    secrets: inherit

package/.github/workflows/pwa-microservices-template-page.cd.yml

@@ -63,7 +63,7 @@ jobs:
       - name: Setup Pages
         uses: actions/configure-pages@v6
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v4
+        uses: actions/upload-pages-artifact@v5
         with:
           # Upload entire repository
           path: './public/underpostnet.github.io/pwa-microservices-template-ghpkg/'

package/.github/workflows/release.cd.yml

@@ -1,14 +1,19 @@
 name: CD | Release deployment | remote ssh
 
 on:
-  workflow_run:
-    workflows: ['CI | Dockerhub']
-    types:
-      - completed
+  push:
+    branches: [main, master]
+
+  workflow_call:
+
+  workflow_dispatch:
 
 jobs:
   after-publish:
-    if: github.repository == 'underpostnet/pwa-microservices-template' || startsWith(github.event.head_commit.message, 'cd(ssh-release)')
+    if: |
+      github.event_name == 'workflow_dispatch'
+      || github.event_name == 'workflow_call'
+      || (github.event_name == 'push' && startsWith(github.event.head_commit.message, 'cd(ssh-release)'))
     runs-on: ubuntu-latest
     steps:
       - name: Run remote deploy via SSH

package/CHANGELOG.md

@@ -1,6 +1,88 @@
 # Changelog
 
-## 2026-04-13
+## 2026-04-15
+
+### cli-cron
+
+- Remove is-inside-container dependency and implement isInsideContainer method in env module ([79d39ece0](https://github.com/underpostnet/engine/commit/79d39ece0db1f3acb65af22e3bc7f7c6a66487a9))
+
+### github-actions
+
+- Ensure deploy-release job runs only on successful build-and-publish ([08ba04632](https://github.com/underpostnet/engine/commit/08ba0463263f6cb2b6c14a6bd56e547c152a0a3a))
+
+## New release v:3.2.2 (2026-04-15)
+
+### docker-image
+
+- Remove unnecessary directory creation and volume declaration for working directory in Dockerfile ([84f7f8950](https://github.com/underpostnet/engine/commit/84f7f8950d45512b6177c7523e4d278f2db25ef4))
+
+### github-actions
+
+- Update CronJob schedules and commands to include kubeadm flag ([2795d6a8a](https://github.com/underpostnet/engine/commit/2795d6a8a9cd552afbd22b16616c982227540dff))
+- Add volume mounts for .env file in dd-cron backup and dns CronJobs ([76cd8a31b](https://github.com/underpostnet/engine/commit/76cd8a31b7d3686d87333bb5384c6648bfbaf066))
+- Refactor deployment and cron job scripts for improved readability and maintainability ([34d38d077](https://github.com/underpostnet/engine/commit/34d38d077adde37d9665b699e642b2ce62bce7fc))
+- Refactor deployment scripts to use environment variables for secret creation ([40165237c](https://github.com/underpostnet/engine/commit/40165237caa07386c71ae2db81894e0e7b1d6373))
+- Update cron jobs and deployment scripts to use secrets and streamline environment variable handling ([3e3b0c3b0](https://github.com/underpostnet/engine/commit/3e3b0c3b013b012c37c076a71915c365047b989f))
+
+### cli-cron
+
+- Add support for k3s, kind, and kubeadm flags in CronJob configuration ([d7edd8dea](https://github.com/underpostnet/engine/commit/d7edd8dea0c978151f80130203686379beebac2c))
+- Add environment variable volume and path for Kubernetes CronJob ([abe731634](https://github.com/underpostnet/engine/commit/abe7316348a90f4fbe8730150bd87a9ee56d8d5c))
+- Refactor deployment scripts to create secrets from container environment variables and streamline environment handling ([e5589ec7f](https://github.com/underpostnet/engine/commit/e5589ec7f6ff67c4d99d49cf65e3261c190919c1))
+- Enhance deployment and backup processes ([f58323077](https://github.com/underpostnet/engine/commit/f58323077dfb4449f22dc4719d07addf2e18d820))
+
+### cli-db
+
+- Add error handling and logging for database operations in UnderpostDB ([c0d935a0c](https://github.com/underpostnet/engine/commit/c0d935a0ce08d26490c997b284e72e3c7f728b76))
+- Implement private engine repository management ([84719664a](https://github.com/underpostnet/engine/commit/84719664adac949b42a0731e408bbb467ed867bd))
+
+### package
+
+- Implement feature X to enhance user experience and fix bug Y in module Z ([8dea4a2f7](https://github.com/underpostnet/engine/commit/8dea4a2f7e53cb5f026bd52aa9adad7909cb01c1))
+- Remove --force option from install:test script to prevent unintended package installations ([2aeeff179](https://github.com/underpostnet/engine/commit/2aeeff179a5bd508b38fd73bb1877d80c1caecb4))
+- Remove force in coveralls-next install script ([5751a6d12](https://github.com/underpostnet/engine/commit/5751a6d126f043b43d90269fa79d0dc1164a5be1))
+
+### runtime-wp
+
+- Implement automatic commit and push of generated files to repository during provisioning ([d20f079ec](https://github.com/underpostnet/engine/commit/d20f079ec472c81960cccf5dcdbdefb3c8eb91e4))
+
+### runtime-lampp
+
+- Enhance .htaccess rules for WordPress and Lampp to protect sensitive files and directories ([1a455ec7b](https://github.com/underpostnet/engine/commit/1a455ec7bd5490603cf7d621d6703d8966a3ee2c))
+
+### cli-deploy
+
+- Refactor command construction in deployment and cron scripts for improved readability ([ceaf5012b](https://github.com/underpostnet/engine/commit/ceaf5012b2b16a52f16e816c178d8d4f5af1590d))
+
+### gitub-actions
+
+- Refactor CI workflows to streamline Docker build and release processes ([ab0875839](https://github.com/underpostnet/engine/commit/ab0875839ab1d174db8d8cff8daf3734282fce00))
+- Refactor CI/CD workflows to streamline Docker build and release processes ([5330af102](https://github.com/underpostnet/engine/commit/5330af10280e7acf2a52b3e0ac17bc5dcd5050b4))
+
+### client-core
+
+- Add SocketIoHandler and AppStore to DefaultConf component list ([a55096889](https://github.com/underpostnet/engine/commit/a550968898ec9526ed3dceef48839ce6be3f1571))
+- Refactor API path handling to introduce getApiBaseProxyPath function and streamline base path construction ([afb1b3532](https://github.com/underpostnet/engine/commit/afb1b35325187ef110b40f4a11f78bfd7e7dbb87))
+- Enhance DropDown component to reset checkbox values and improve state management on click events ([b02a3fad4](https://github.com/underpostnet/engine/commit/b02a3fad4b9587b317f85c5763f34f806642a7ee))
+- Refactor API path handling to introduce getApiBaseProxyPath function and simplify getApiBasePath logic ([0a18bce99](https://github.com/underpostnet/engine/commit/0a18bce996835a8152360a5f7b2f1b2afaea3423))
+
+### cli-fs
+
+- Enhance pull operation to log skipped files when they already exist ([7330aa012](https://github.com/underpostnet/engine/commit/7330aa0126dd67bedf75b847dc6c0794f2ecbf74))
+
+### cli-env
+
+- Refactor UnderpostSecret to streamline environment file handling and remove existing global .env file ([c510f7cff](https://github.com/underpostnet/engine/commit/c510f7cff1aeb3ae26e037000efcee53bcfe6b4b))
+
+### server-start
+
+- Add cleanup command to production deployment process ([5bf5530e3](https://github.com/underpostnet/engine/commit/5bf5530e34b97a6fc1a240a10604d4f5abe2f8cb))
+
+### conf
+
+- Add SocketIoHandler and AppStore to default configuration ([d155277a3](https://github.com/underpostnet/engine/commit/d155277a38359d32d5cd78be20453990585d5d00))
+
+## New release v:3.2.0 (2026-04-13)
 
 ### cli-repository
 

package/CLI-HELP.md

@@ -1,4 +1,4 @@
-## underpost ci/cd cli v3.2.0
+## underpost ci/cd cli v3.2.3
 
 ### Usage: `underpost [options] [command]`
   ```
@@ -321,7 +321,7 @@ Manages Underpost configurations using various operators.
 
 Arguments:
   operator                 The configuration operation to perform. Options: set,
-                           delete, get, list, clean.
+                           delete, get, list, clean, isInsideContainer.
   key                      Optional: The specific configuration key to manage.
   value                    Optional: The value to set for the configuration key.
 
@@ -553,13 +553,17 @@ Manages secrets for various platforms.
 
 Arguments:
   platform                            The secret management platform. Options:
-                                      underpost.
+                                      underpost, globalSecretClean.
 
 Options:
   --init                              Initializes the secrets platform
                                       environment.
   --create-from-file <path-env-file>  Creates secrets from a specified
                                       environment file.
+  --create-from-env                   Creates secrets from container environment
+                                      variables (envFrom: secretRef).
+  --global-clean                      Removes all filesystem traces of secrets
+                                      (engine-private, .env, conf cache).
   --list                              Lists all available secrets for the
                                       platform.
   -h, --help                          display help for command
@@ -659,6 +663,7 @@ Options:
   --kubeadm                                  Enables the kubeadm context for database operations.
   --kind                                     Enables the kind context for database operations.
   --k3s                                      Enables the k3s context for database operations.
+  --repo-backup                              Backs up repositories (git commit+push) inside deployment pods via kubectl exec.
   -h, --help                                 display help for command
  
 ```
@@ -682,6 +687,7 @@ Options:
   --instances  Apply to instance data collection
   --generate   Generate cluster metadata
   --itc        Apply under container execution context
+  --dev        Sets the development cli context
   -h, --help   display help for command
  
 ```
@@ -723,8 +729,6 @@ Options:
   --dry-run                  Preview cron jobs without executing them.
   --create-job-now           After applying manifests, immediately create a Job
                              from each CronJob (requires --apply).
-  --ssh                      Execute backup commands via SSH on the remote node
-                             instead of locally.
   -h, --help                 display help for command
  
 ```

package/Dockerfile

@@ -34,9 +34,11 @@ RUN npm --version
 RUN npm install -g underpost
 RUN underpost --version
 
+# Create non-root user for secure container execution (cron jobs, init containers)
+# Deployment containers override to root via securityContext when npm install -g is needed
+RUN useradd -m -u 1000 -s /bin/bash dd
+
 # Create working directory
-RUN mkdir /home/dd
-VOLUME /home/dd
 WORKDIR /home/dd
 
 # Expose necessary ports

package/README.md

@@ -16,7 +16,7 @@
 
 <div align="center">
 
-[![Node.js CI](https://github.com/underpostnet/engine/actions/workflows/docker-image.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/docker-image.ci.yml) [![Test](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml) [![Downloads](https://img.shields.io/npm/dm/underpost.svg)](https://www.npmjs.com/package/underpost) [![Socket Badge](https://socket.dev/api/badge/npm/package/underpost/3.2.0)](https://socket.dev/npm/package/underpost/overview/3.2.0) [![Coverage Status](https://coveralls.io/repos/github/underpostnet/engine/badge.svg?branch=master)](https://coveralls.io/github/underpostnet/engine?branch=master) [![Version](https://img.shields.io/npm/v/underpost.svg)](https://www.npmjs.org/package/underpost) [![License](https://img.shields.io/npm/l/underpost.svg)](https://www.npmjs.com/package/underpost)
+[![Node.js CI](https://github.com/underpostnet/engine/actions/workflows/docker-image.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/docker-image.ci.yml) [![Test](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml) [![Downloads](https://img.shields.io/npm/dm/underpost.svg)](https://www.npmjs.com/package/underpost) [![Socket Badge](https://socket.dev/api/badge/npm/package/underpost/3.2.3)](https://socket.dev/npm/package/underpost/overview/3.2.3) [![Coverage Status](https://coveralls.io/repos/github/underpostnet/engine/badge.svg?branch=master)](https://coveralls.io/github/underpostnet/engine?branch=master) [![Version](https://img.shields.io/npm/v/underpost.svg)](https://www.npmjs.org/package/underpost) [![License](https://img.shields.io/npm/l/underpost.svg)](https://www.npmjs.com/package/underpost)
 
 </div>
 
@@ -61,7 +61,7 @@ npm run dev
 <a target="_top" href="https://www.nexodev.org/docs?cid=src">See Docs here.</a>
 
 <!-- cli-index-start -->
-## underpost ci/cd cli v3.2.0
+## underpost ci/cd cli v3.2.3
 
 ### Usage: `underpost [options] [command]`
   ```

package/manifests/cronjobs/dd-cron/dd-cron-backup.yaml

@@ -23,12 +23,15 @@ spec:
         spec:
           containers:
             - name: dd-cron-backup
-              image: underpost/underpost-engine:v3.2.0
+              image: underpost/underpost-engine:v3.2.3
               command:
                 - /bin/sh
                 - -c
                 - >
-                   cd /home/dd/engine && node bin env dd-cron production && node bin cron --git --dev --ssh dd-lampp,dd-cyberia,dd-core,dd-test backup
+                  cd /home/dd/engine &&
+                  node bin run secret &&
+                  node bin env dd-cron production &&
+                  node bin cron --git --dev --kubeadm dd-lampp,dd-cyberia,dd-core,dd-test backup
               volumeMounts:
                 - mountPath: /home/dd/engine
                   name: underpost-cron-container-volume

package/manifests/cronjobs/dd-cron/dd-cron-dns.yaml

@@ -23,12 +23,15 @@ spec:
         spec:
           containers:
             - name: dd-cron-dns
-              image: underpost/underpost-engine:v3.2.0
+              image: underpost/underpost-engine:v3.2.3
               command:
                 - /bin/sh
                 - -c
                 - >
-                   cd /home/dd/engine && node bin env dd-cron production && node bin cron --git --dev --ssh dd-cron dns
+                  cd /home/dd/engine &&
+                  node bin run secret &&
+                  node bin env dd-cron production &&
+                  node bin cron --git --dev --kubeadm dd-cron dns
               volumeMounts:
                 - mountPath: /home/dd/engine
                   name: underpost-cron-container-volume

package/manifests/deployment/dd-default-development/deployment.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: dd-default-development-blue
-          image: localhost/rockylinux9-underpost:v3.2.0
+          image: localhost/rockylinux9-underpost:v3.2.3
           #          resources:
           #            requests:
           #              memory: "124Ki"
@@ -100,7 +100,7 @@ spec:
     spec:
       containers:
         - name: dd-default-development-green
-          image: localhost/rockylinux9-underpost:v3.2.0
+          image: localhost/rockylinux9-underpost:v3.2.3
           #          resources:
           #            requests:
           #              memory: "124Ki"

package/manifests/deployment/dd-test-development/deployment.yaml

@@ -20,25 +20,21 @@ spec:
     spec:
       containers:
         - name: dd-test-development-blue
-          image: localhost/rockylinux9-underpost:v3.2.0
+          image: localhost/rockylinux9-underpost:v3.2.3
+          envFrom:
+            - secretRef:
+                name: underpost-config
 
           command:
             - /bin/sh
             - -c
             - >
-              npm install -g npm@11.2.0 && npm install -g underpost && underpost secret underpost --create-from-file /etc/config/.env.development && underpost start --build --run dd-test development
+              npm install -g npm@11.2.0 &&
+              npm install -g underpost &&
+              underpost secret underpost --create-from-env &&
+              underpost start --build --run dd-test development
+
 
-    
-          volumeMounts:
-            - name: config-volume-dd-test-development-blue
-              mountPath: /etc/config
-    
-      volumes:
-        - name: config-volume-dd-test-development-blue
-          configMap:
-            name: underpost-config
-    
-      
 ---
 apiVersion: v1
 kind: Service
@@ -116,25 +112,21 @@ spec:
     spec:
       containers:
         - name: dd-test-development-green
-          image: localhost/rockylinux9-underpost:v3.2.0
+          image: localhost/rockylinux9-underpost:v3.2.3
+          envFrom:
+            - secretRef:
+                name: underpost-config
 
           command:
             - /bin/sh
             - -c
             - >
-              npm install -g npm@11.2.0 && npm install -g underpost && underpost secret underpost --create-from-file /etc/config/.env.development && underpost start --build --run dd-test development
+              npm install -g npm@11.2.0 &&
+              npm install -g underpost &&
+              underpost secret underpost --create-from-env &&
+              underpost start --build --run dd-test development
+
 
-    
-          volumeMounts:
-            - name: config-volume-dd-test-development-green
-              mountPath: /etc/config
-    
-      volumes:
-        - name: config-volume-dd-test-development-green
-          configMap:
-            name: underpost-config
-    
-      
 ---
 apiVersion: v1
 kind: Service

package/package.json

@@ -2,7 +2,7 @@
     "type": "module",
     "main": "src/index.js",
     "name": "underpost",
-    "version": "3.2.0",
+    "version": "3.2.3",
     "description": "pwa api rest template",
     "scripts": {
         "start": "node --max-old-space-size=8192 src/server",
@@ -16,7 +16,7 @@
         "dev:proxy": "NODE_ENV=development node src/proxy proxy",
         "docs": "jsdoc -c jsdoc.json",
         "install:global": "npm install -g jsdoc && npm install -g prettier",
-        "install:test": "npm install -g mocha && npm install -g c8 && npm install -g coveralls-next --force",
+        "install:test": "npm install -g mocha && npm install -g c8 && npm install -g coveralls-next",
         "install": "npm run install:global && npm run install:test",
         "prettier": "prettier --write .",
         "fix": "npm audit fix --force && npm audit",
@@ -86,7 +86,6 @@
         "http-proxy-middleware": "^3.0.5",
         "ignore-walk": "^8.0.0",
         "iovalkey": "^0.3.3",
-        "is-inside-container": "^1.0.0",
         "json-colorizer": "^3.0.1",
         "jsonwebtoken": "^9.0.3",
         "mariadb": "^3.2.2",