keyhan
3eff38f8d2
Rework the application build/deploy pipeline for scalability, reproducibility, and security: - Build queue: deploys run through a bounded-concurrency Bull queue (BUILD_CONCURRENCY, default 3) so concurrent user deploys can't flood the cluster with Kaniko jobs. Build state (progress / cancel / session) moves from in-memory Maps to Redis, so cancel + live logs work across backend replicas. - Nixpacks + BYO Dockerfile: code runtimes build via Nixpacks (or the user's own Dockerfile when present); the hand-written per-runtime Dockerfile generators and runtime auto-detection are removed. WordPress keeps its templated path. Build-time mirror env (NIXPACKS_BUILD_ENV) supports the Iran network. - Source upload to MinIO: archives stream to in-cluster MinIO; build pods pull via a presigned URL. Removes the PVC + helper pod + kubectl cp upload path. - Report-only Trivy scan after build; per-severity summary stored on the deployment and shown as a badge in the dashboard. Never gates a deploy. - Registry GC: a Redis-locked daily job keeps the newest N image tags per app (REGISTRY_KEEP_VERSIONS, default 3) and reclaims disk via garbage-collect. - Hardening: git tokens are delivered via a per-build Secret + git credential store instead of being embedded in the clone URL / Job manifest; build timeout is configurable. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
90 lines
2.7 KiB
JSON
90 lines
2.7 KiB
JSON
{
|
|
"name": "cloudhost-backend",
|
|
"version": "1.0.0",
|
|
"description": "CloudHost PaaS Backend API",
|
|
"private": true,
|
|
"scripts": {
|
|
"build": "nest build",
|
|
"start": "nest start",
|
|
"start:dev": "nest start --watch",
|
|
"start:debug": "nest start --debug --watch",
|
|
"start:prod": "node dist/main",
|
|
"lint": "eslint \"{src,apps,libs,test}/**/*.ts\" --fix",
|
|
"format": "prettier --write \"src/**/*.ts\" \"test/**/*.ts\"",
|
|
"test": "jest",
|
|
"test:watch": "jest --watch",
|
|
"test:e2e": "jest --config ./test/jest-e2e.json",
|
|
"typeorm": "ts-node -r tsconfig-paths/register ./node_modules/typeorm/cli.js",
|
|
"migration:generate": "npm run typeorm -- migration:generate -d src/config/typeorm.config.ts",
|
|
"migration:run": "npm run typeorm -- migration:run -d src/config/typeorm.config.ts",
|
|
"migration:revert": "npm run typeorm -- migration:revert -d src/config/typeorm.config.ts",
|
|
"seed": "ts-node -r tsconfig-paths/register src/seed.ts"
|
|
},
|
|
"dependencies": {
|
|
"@kubernetes/client-node": "^1.4.0",
|
|
"@nestjs/bull": "^11.0.4",
|
|
"@nestjs/common": "^11.1.24",
|
|
"@nestjs/config": "^4.0.4",
|
|
"@nestjs/core": "^11.1.26",
|
|
"@nestjs/jwt": "^11.0.2",
|
|
"@nestjs/passport": "^11.0.5",
|
|
"@nestjs/platform-express": "^11.1.26",
|
|
"@nestjs/swagger": "^11.4.4",
|
|
"@nestjs/typeorm": "^11.0.1",
|
|
"bcrypt": "^6.0.0",
|
|
"bull": "^4.12.0",
|
|
"class-transformer": "^0.5.1",
|
|
"class-validator": "^0.15.1",
|
|
"handlebars": "^4.7.8",
|
|
"helmet": "^8.2.0",
|
|
"js-yaml": "^4.2.0",
|
|
"minio": "^8.0.7",
|
|
"multer": "^2.1.1",
|
|
"passport": "^0.7.0",
|
|
"passport-jwt": "^4.0.1",
|
|
"pg": "^8.21.0",
|
|
"reflect-metadata": "^0.2.1",
|
|
"rxjs": "^7.8.2",
|
|
"typeorm": "^1.0.0",
|
|
"uuid": "^14.0.0"
|
|
},
|
|
"devDependencies": {
|
|
"@nestjs/cli": "^11.0.23",
|
|
"@nestjs/schematics": "^11.1.0",
|
|
"@nestjs/testing": "^11.1.26",
|
|
"@types/bcrypt": "^6.0.0",
|
|
"@types/express": "^4.17.21",
|
|
"@types/jest": "^30.0.0",
|
|
"@types/js-yaml": "^4.0.9",
|
|
"@types/multer": "^2.1.0",
|
|
"@types/node": "^24.0.0",
|
|
"@types/passport-jwt": "^4.0.0",
|
|
"@typescript-eslint/eslint-plugin": "^8.61.0",
|
|
"@typescript-eslint/parser": "^8.61.0",
|
|
"eslint": "^9.0.0",
|
|
"jest": "^30.4.2",
|
|
"prettier": "^3.8.4",
|
|
"ts-jest": "^29.4.11",
|
|
"ts-node": "^10.9.2",
|
|
"tsconfig-paths": "^4.2.0",
|
|
"typescript": "^6.0.0"
|
|
},
|
|
"jest": {
|
|
"moduleFileExtensions": [
|
|
"js",
|
|
"json",
|
|
"ts"
|
|
],
|
|
"rootDir": "src",
|
|
"testRegex": ".*\\.spec\\.ts$",
|
|
"transform": {
|
|
"^.+\\.(t|j)s$": "ts-jest"
|
|
},
|
|
"collectCoverageFrom": [
|
|
"**/*.(t|j)s"
|
|
],
|
|
"coverageDirectory": "../coverage",
|
|
"testEnvironment": "node"
|
|
}
|
|
}
|