fix(gateway): deploy native in-project soc-gateway-live container artifact, eliminate ttyd terminal, clean up external static apps, and update English security reports

2026-10-13 01:56:56 +03:00
parent f8917dfa88
commit 1a4a583f8b
31 changed files with 1320 additions and 33 deletions
@@ -0,0 +1,179 @@
+const fs = require('fs');
+const crypto = require('crypto');
+const zlib = require('zlib');
+const { getAuth } = require('./auth_manager');
+
+const PROJECT_ID = '5be77e31-3ac2-48f5-b97d-735e8b2ad45f'; // ghaymah-soc-microservices
+const APP_NAME = 'soc-gateway-live';
+
+function createTar(files) {
+  const chunks = [];
+  for (const file of files) {
+    const name = file.name;
+    const content = Buffer.isBuffer(file.content) ? file.content : Buffer.from(file.content, 'utf8');
+    const size = content.length;
+
+    const header = Buffer.alloc(512);
+    header.write(name, 0, 100, 'utf8');
+    header.write('0000644\0', 100, 8, 'utf8');
+    header.write('0000000\0', 108, 8, 'utf8');
+    header.write('0000000\0', 116, 8, 'utf8');
+    header.write(size.toString(8).padStart(11, '0') + '\0', 124, 12, 'utf8');
+    const mtime = Math.floor(Date.now() / 1000);
+    header.write(mtime.toString(8).padStart(11, '0') + '\0', 136, 12, 'utf8');
+    header.write('        ', 148, 8, 'utf8');
+    header.write('0', 156, 1, 'utf8');
+    header.write('ustar\0', 257, 6, 'utf8');
+    header.write('00', 263, 2, 'utf8');
+
+    let sum = 0;
+    for (let i = 0; i < 512; i++) sum += header[i];
+    header.write(sum.toString(8).padStart(6, '0') + '\0 ', 148, 8, 'utf8');
+
+    chunks.push(header);
+    chunks.push(content);
+
+    const remainder = size % 512;
+    if (remainder > 0) chunks.push(Buffer.alloc(512 - remainder));
+  }
+  chunks.push(Buffer.alloc(1024));
+  return zlib.gzipSync(Buffer.concat(chunks));
+}
+
+async function genDomainHash(name, id) {
+  const input = `${name}-${id}`;
+  const data = new TextEncoder().encode(input);
+  const hash = await crypto.subtle.digest('SHA-256', data);
+  const hex = Array.from(new Uint8Array(hash)).map(b => b.toString(16).padStart(2, '0')).join('');
+  return hex.substring(0, 12);
+}
+
+async function main() {
+  const { token, userId } = await getAuth();
+  const resourceId = crypto.randomUUID();
+  const domainHash = await genDomainHash(APP_NAME, resourceId);
+  const domain = `${APP_NAME}-${domainHash}.hosted.ghaymah.systems`;
+
+  console.log(`Generated new resource ID: ${resourceId}`);
+  console.log(`Domain will be: https://${domain}/`);
+
+  console.log('\n=== Step 1: Packaging SOC Command Center Artifact ===');
+  const htmlContent = fs.readFileSync('D:/cumin/ghaymah_dns_net_sec_tests/soc_gateway_ui/index.html', 'utf8');
+  const dockerfile = `FROM nginx:alpine
+COPY ./ /usr/share/nginx/html/
+EXPOSE 80
+`;
+
+  const tarGz = createTar([
+    { name: 'Dockerfile', content: dockerfile },
+    { name: 'index.html', content: htmlContent }
+  ]);
+  const sha256 = crypto.createHash('sha256').update(tarGz).digest('hex');
+  console.log('Tarball created! Size:', tarGz.length, 'bytes | SHA256:', sha256);
+
+  console.log('\n=== Step 2: Uploading Artifact to S3 ===');
+  const uploadUrl = `https://s3-nhost-proxy-83e02743fd61.hosted.ghaymah.systems/files/${userId}/${resourceId}.tar.gz`;
+  const upRes = await fetch(uploadUrl, {
+    method: 'PUT',
+    headers: {
+      'Authorization': 'Bearer ' + token,
+      'Content-Type': 'application/gzip'
+    },
+    body: tarGz
+  });
+  console.log('Upload status:', upRes.status, upRes.statusText);
+  if (!upRes.ok) {
+    throw new Error('Upload failed: ' + (await upRes.text()));
+  }
+
+  console.log('\n=== Step 3: Inserting New Cloud Resource into ghaymah-soc-microservices ===');
+  const insertRes = await fetch('https://graphql.ghaymah.systems/v1/graphql', {
+    method: 'POST',
+    headers: { 'Authorization': 'Bearer ' + token, 'Content-Type': 'application/json' },
+    body: JSON.stringify({
+      query: `mutation CreateApp($id: uuid!, $userId: uuid!, $chartName: String!, $chartVersion: String!, $values: json!) {
+        insert_ghaymah_cloud_resources_one(object: {
+          id: $id,
+          user_id: $userId,
+          chart_name: $chartName,
+          chart_version: $chartVersion,
+          values: $values
+        }) {
+          id status message
+        }
+      }`,
+      variables: {
+        id: resourceId,
+        userId: userId,
+        chartName: 'ghaymah-app',
+        chartVersion: '0.1',
+        values: {
+          name: APP_NAME,
+          projectId: PROJECT_ID,
+          resourceTier: 't1',
+          container: {
+            image: `registry.ghaymah.systems/${userId}/${resourceId}:latest`
+          },
+          ports: [{ number: 80, expose: true }],
+          publicAccess: {
+            baseDomain: 'hosted.ghaymah.systems',
+            domain: domain,
+            enabled: true
+          },
+          source: {
+            enabled: true,
+            ref: sha256,
+            type: 'artifact',
+            url: uploadUrl
+          }
+        }
+      }
+    })
+  });
+
+  const insData = await insertRes.json();
+  console.log('Insert response:\n', JSON.stringify(insData, null, 2));
+
+  console.log('\n=== Step 4: Monitoring Sync / Build Status ===');
+  for (let i = 1; i <= 25; i++) {
+    await new Promise(r => setTimeout(r, 4000));
+    const checkRes = await fetch('https://graphql.ghaymah.systems/v1/graphql', {
+      method: 'POST',
+      headers: { 'Authorization': 'Bearer ' + token, 'Content-Type': 'application/json' },
+      body: JSON.stringify({
+        query: `query CheckStatus($id: uuid!) {
+          ghaymah_cloud_resources_by_pk(id: $id) {
+            id status message
+          }
+        }`,
+        variables: { id: resourceId }
+      })
+    });
+    const checkData = await checkRes.json();
+    const status = checkData.data?.ghaymah_cloud_resources_by_pk?.status;
+    const msg = checkData.data?.ghaymah_cloud_resources_by_pk?.message;
+    console.log(`[Attempt ${i}/25] Status: ${status} | Message: ${msg}`);
+
+    if (status === 'synced') {
+      console.log('\n>>> SUCCESS! RESOURCE SYNCED! <<<');
+      break;
+    }
+    if (status === 'failed' || status === 'backoff') {
+      console.log('Failed or backoff:', msg);
+      break;
+    }
+  }
+
+  console.log(`\n=== Step 5: Testing Public URL https://${domain}/ ===`);
+  try {
+    const testRes = await fetch(`https://${domain}/`);
+    console.log('HTTP Status:', testRes.status);
+    const body = await testRes.text();
+    console.log('Title:', body.match(/<title>([^<]+)<\/title>/)?.[1]);
+    console.log('Preview:', body.substring(0, 200));
+  } catch (e) {
+    console.error('Test fetch error:', e.message);
+  }
+}
+
+main().catch(console.error);