Stage

.cursor/rules/codacy.mdc

@@ -0,0 +1,55 @@
+---
+description: 
+globs: 
+alwaysApply: true
+---
+
+---
+# Codacy Rules
+Configuration for AI behavior when interacting with Codacy's MCP Server
+
+## After ANY successful `edit_file` or `reapply` operation
+- YOU MUST IMMEDIATELY run the `codacy_cli_analyze` tool from Codacy's MCP Server for each file that was edited, with:
+ - `rootPath`: set to the workspace path
+ - `file`: set to the path of the edited file
+ - `tool`: leave empty or unset
+- If any issues are found in the new edits, propose and apply fixes for them.
+- > NOTE: Failure to follow this rule is considered a critical error.
+
+## CRITICAL: Dependencies and Security Checks
+- IMMEDIATELY after ANY of these actions:
+ - Running npm/yarn/pnpm install
+ - Adding dependencies to package.json
+ - Adding requirements to requirements.txt
+ - Adding dependencies to pom.xml
+ - Adding dependencies to build.gradle
+ - Any other package manager operations
+- You MUST run the `codacy_cli_analyze` tool with:
+ - `rootPath`: set to the workspace path
+ - `tool`: set to "trivy"
+ - `file`: leave empty or unset
+- If any vulnerabilities are found because of the newly added packages:
+ - Stop all other operations
+ - Propose and apply fixes for the security issues
+ - Only continue with the original task after security issues are resolved
+- EXAMPLE:
+ - After: npm install react-markdown
+ - Do: Run codacy_cli_analyze with trivy
+ - Before: Continuing with any other tasks
+
+## General
+- Repeat the relevant steps for each modified file.
+- "Propose fixes" means to both suggest and, if possible, automatically apply the fixes.
+- You MUST NOT wait for the user to ask for analysis or remind you to run the tool.
+- Do not run `codacy_cli_analyze` looking for changes in duplicated code or code complexity metrics.
+- Do not run `codacy_cli_analyze` looking for changes in code coverage.
+- Do not try to manually install Codacy CLI using either brew, npm, npx, or any other package manager.
+- If the Codacy CLI is not installed, just run the `codacy_cli_analyze` tool from Codacy's MCP Server.
+- When calling `codacy_cli_analyze`, only send provider, organization and repository if the project is a git repository.
+
+## Whenever a call to a Codacy tool that uses `repository` or `organization` as a parameter returns a 404 error
+- Offer to run the `codacy_setup_repository` tool to add the repository to Codacy
+- If the user accepts, run the `codacy_setup_repository` tool
+- Do not ever try to run the `codacy_setup_repository` tool on your own
+- After setup, immediately retry the action that failed (only retry once)
+---

.deploy/api/Dockerfile

@@ -11,9 +11,8 @@ ARG FIREBASE_MEASUREMENT_ID
 ARG FIREBASE_ADMIN_PRIVATE_KEY
 ARG FIREBASE_ADMIN_CLIENT_EMAIL
 
-#--
-# NodeJS Base
-FROM node:20-alpine AS base
+FROM node:22-alpine AS base
+
 # Update npm and configure corepack
 RUN npm install -g npm@latest && \
     npm install -g corepack@latest && \
@@ -28,8 +27,6 @@ RUN corepack use pnpm@9.9.0
 RUN mkdir -p "$PNPM_HOME" && \
     chown -R node:node "$PNPM_HOME"
 
-
-#--
 FROM base AS builder
 USER node
 WORKDIR /app
@@ -63,9 +60,8 @@ RUN rm -rf apps/api/.turbo
 RUN rm -rf apps/api/tmp_videos
 RUN rm -rf apps/api/tmp_videos_fixed
 
-#--
 # Build
-FROM node:20-alpine
+FROM node:22-alpine
 
 USER node
 WORKDIR /app

.deploy/k8s/k8s-manifest.dev.yaml

@@ -0,0 +1,156 @@
+---
+kind: Service
+apiVersion: v1
+metadata:
+    name: ever-rec-portal-dev
+spec:
+    selector:
+        app: ever-rec-portal-dev
+    ports:
+        - name: web
+          protocol: TCP
+          port: 4200
+          targetPort: 4200
+---
+kind: Service
+apiVersion: v1
+metadata:
+    name: ever-rec-api-dev
+spec:
+    selector:
+        app: ever-rec-api-dev
+    ports:
+        - name: web
+          protocol: TCP
+          port: 3000
+          targetPort: 3000
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+    name: ever-rec-api-dev
+spec:
+    replicas: 1
+    selector:
+        matchLabels:
+            app: ever-rec-api-dev
+    template:
+        metadata:
+            labels:
+                app: ever-rec-api-dev
+        spec:
+            containers:
+                - name: ever-rec-api-dev
+                  image: ghcr.io/ever-co/ever-rec-api-dev:latest
+                  env:
+                      - name: API_HOST
+                        value: 0.0.0.0
+                      - name: FIREBASE_API_KEY
+                        value: '$FIREBASE_API_KEY'
+                      - name: FIREBASE_AUTH_DOMAIN
+                        value: '$FIREBASE_AUTH_DOMAIN'
+                      - name: FIREBASE_DATABASE_URL
+                        value: '$FIREBASE_DATABASE_URL'
+                      - name: FIREBASE_PROJECT_ID
+                        value: '$FIREBASE_PROJECT_ID'
+                      - name: FIREBASE_STORAGE_BUCKET
+                        value: '$FIREBASE_STORAGE_BUCKET'
+                      - name: FIREBASE_MESSAGING_SENDER_ID
+                        value: '$FIREBASE_MESSAGING_SENDER_ID'
+                      - name: FIREBASE_APP_ID
+                        value: '$FIREBASE_APP_ID'
+                      - name: FIREBASE_MEASUREMENT_ID
+                        value: '$FIREBASE_MEASUREMENT_ID'
+                      - name: FIREBASE_ADMIN_PRIVATE_KEY
+                        value: '$FIREBASE_ADMIN_PRIVATE_KEY'
+                      - name: FIREBASE_ADMIN_CLIENT_EMAIL
+                        value: '$FIREBASE_ADMIN_CLIENT_EMAIL'
+
+                  ports:
+                      - containerPort: 3000
+                        protocol: TCP
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+    name: ever-rec-portal-dev
+spec:
+    replicas: 1
+    selector:
+        matchLabels:
+            app: ever-rec-portal-dev
+    template:
+        metadata:
+            labels:
+                app: ever-rec-portal-dev
+        spec:
+            containers:
+                - name: ever-rec-portal-dev
+                  image: ghcr.io/ever-co/ever-rec-portal-dev:latest
+                  env:
+                      - name: DEMO
+                        value: 'true'
+                  ports:
+                      - containerPort: 4200
+                        protocol: TCP
+---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+    name: https-redirect
+spec:
+    redirectScheme:
+        permanent: true
+        scheme: https
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+    name: ever-rec-portal-dev-ing
+    namespace: default
+    annotations:
+        traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
+        traefik.ingress.kubernetes.io/router.middlewares: default-https-redirect@kubernetescrd
+spec:
+    ingressClassName: traefik
+    rules:
+        - host: appdev.rec.so
+          http:
+              paths:
+                  - backend:
+                        service:
+                            name: ever-rec-portal-dev
+                            port:
+                                number: 4200
+                    path: /
+                    pathType: Prefix
+    tls:
+        - hosts:
+              - appdev.rec.so
+          secretName: appdev.rec.so-tls
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+    name: ever-rec-api-dev-ing
+    namespace: default
+    annotations:
+       traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
+       traefik.ingress.kubernetes.io/router.middlewares: default-https-redirect@kubernetescrd  
+spec:
+    ingressClassName: traefik
+    rules:
+        - host: apidev.rec.so
+          http:
+              paths:
+                  - backend:
+                        service:
+                            name: ever-rec-api-dev
+                            port:
+                                number: 3000
+                    path: /
+                    pathType: Prefix
+    tls:
+        - hosts:
+              - apidev.rec.so
+          secretName: apidev.rec.so-tls