feature: Platform hardening and infrastructure updates

.editorconfig

@@ -1,40 +1,15 @@
-# editorconfig.org
-
 root = true
 
-[**]
-indent_size = 4
-indent_style = space
+[*]
 charset = utf-8
+indent_style = space
+indent_size = 4
 end_of_line = lf
-trim_trailing_whitespace = true
-
-[**.html]
-indent_size = 2
-
-[**.jade]
-indent_size = 2
-
-[**.json]
-indent_size = 2
-
-[**.scss]
-indent_size = 2
-insert_final_newline = true
-
-[**.css]
-indent_size = 2
-insert_final_newline = true
-
-[**.md]
-trim_trailing_whitespace = false
-
-[**.js]
-indent_size = 2
 insert_final_newline = true
+trim_trailing_whitespace = true
 
-[**.yml]
+[{*.json,*.yml}]
 indent_size = 2
 
 [Makefile]
-indent_style = tab
+indent_style = tab

.env.example

@@ -0,0 +1,110 @@
+###############################################
+# CodePush Server Configuration (.env)
+###############################################
+
+# -------------------------------
+# General / Logs
+# -------------------------------
+# 클론시 유일한 환경변수 값 (*)
+COMPOSE_PROJECT_NAME=code-push-server
+LOG_LEVEL=debug
+LOG_FORMAT=text
+
+# -------------------------------
+# Database (MySQL) (*)
+# - 유저/앱/패키지 메타데이터 저장
+# -------------------------------
+RDS_USERNAME=codepush
+RDS_PASSWORD=codepush
+RDS_DATABASE=codepush
+RDS_HOST=127.0.0.1
+RDS_PORT=3306
+
+# -------------------------------
+# Storage Settings (*)
+# storageType: local | s3 | qiniu | oss | tencentcloud
+# -------------------------------
+STORAGE_TYPE=local
+
+# Local storage (default) (*)
+# 저장 파일이 위치할 경로 (미설정 시 OS tmpdir 사용)
+STORAGE_DIR=./storage
+
+# 파일 다운로드 URL - 반드시 본인 서버 URL로 수정
+LOCAL_DOWNLOAD_URL=http://127.0.0.1:3000/download
+
+# 공통 Download URL 우선순위:
+# LOCAL_DOWNLOAD_URL > DOWNLOAD_URL
+DOWNLOAD_URL=http://127.0.0.1:3000/download
+
+# -------------------------------
+# JWT Token (*)
+# -------------------------------
+TOKEN_SECRET=REPLACE_WITH_RANDOM_LONG_SECRET
+
+# -------------------------------
+# Common Behavior 
+# -------------------------------
+# 프로덕션 배포 및 계정생성 후 false 로 수정
+ALLOW_REGISTRATION=true
+TRY_LOGIN_TIMES=4
+DIFF_NUMS=3
+# DATA_DIR=./data
+# 클라우드 배포시 보통 data 디렉토리에 쓰기 권한이 없음
+DATA_DIR=
+# update_check 결과를 Redis에 캐시(프로덕션 true 사용) (*)
+UPDATE_CHECK_CACHE=false
+# rollout 대상 여부를 clientUniqueId별로 캐시(프로덕션 true 사용) (*)
+ROLLOUT_CLIENT_UNIQUE_ID_CACHE=false
+
+# -------------------------------
+# Redis (optional: only needed for login attempt limit or caching) (*)
+# -------------------------------
+REDIS_HOST=127.0.0.1
+REDIS_PORT=6379
+REDIS_PASSWORD=
+REDIS_DB=0
+
+# -------------------------------
+# Email SMTP (optional: only used for registration + verification)
+# -------------------------------
+SMTP_HOST=
+SMTP_PORT=465
+SMTP_USERNAME=
+SMTP_PASSWORD=
+
+# -------------------------------
+# Cloud Storage (Optional)
+# Qiniu / S3 / OSS / Tencent Cloud
+# -------------------------------
+QINIU_ACCESS_KEY=
+QINIU_SECRET_KEY=
+QINIU_BUCKET_NAME=
+QINIU_DOWNLOAD_URL=
+
+# AWS IAM - admin_codepush with the customS3BucketAccessForCodePush policy (*)
+AWS_ACCESS_KEY_ID=
+AWS_SECRET_ACCESS_KEY=
+AWS_SESSION_TOKEN=
+AWS_BUCKET_NAME=
+AWS_REGION=
+AWS_DOWNLOAD_URL=
+# 버킷내 경로 프리픽스 (optional)
+AWS_S3_KEY_PREFIX=codepush/
+
+OSS_ACCESS_KEY_ID=
+OSS_SECRET_ACCESS_KEY=
+OSS_ENDPOINT=
+OSS_BUCKET_NAME=
+OSS_PREFIX=
+OSS_DOWNLOAD_URL=
+
+COS_ACCESS_KEY_ID=
+COS_SECRET_ACCESS_KEY=
+COS_BUCKET_NAME=
+COS_REGION=
+COS_DOWNLOAD_URL=
+
+# The value should be a comma-separated list of IP addresses, e.g., "127.0.0.1,10.0.0.1". 
+WEB_UI_WHITELIST=
+WEB_UI_ALLOW=

.eslintignore

@@ -0,0 +1 @@
+*.js

.eslintrc.js

@@ -0,0 +1,3 @@
+module.exports = {
+    extends: ['@shm-open/eslint-config-bundle'],
+};

.github/workflows/nodejs.yml

@@ -0,0 +1,41 @@
+# This workflow will do a clean install of node dependencies, build the source code and run tests across different versions of node
+# For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions
+
+name: Node.js CI
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+    branches: [master]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    strategy:
+      matrix:
+        node-version: [14.x]
+
+    services:
+      redis:
+        image: redis
+        ports:
+          - 6379:6379
+      mysql:
+        image: mysql
+        env:
+          MYSQL_ROOT_PASSWORD: password
+        ports:
+          - 3306:3306
+
+    steps:
+      - uses: actions/checkout@v3
+      - name: Use Node.js ${{ matrix.node-version }}
+        uses: actions/setup-node@v3
+        with:
+          node-version: ${{ matrix.node-version }}
+      - run: npm ci
+      - run: npm run build --if-present
+      - run: npm test
+      - run: npm run lint --if-present

.gitignore

@@ -7,15 +7,18 @@ pids
 *.pid
 *.seed
 *.DS_Store
+bin/
+.nyc_output/
 
-.grunt
+# deps
+node_modules/
 
-# Dependency directory
-# https://docs.npmjs.com/misc/faq#should-i-check-my-node-modules-folder-into-git
-node_modules
-
-coverage
 
 # vs code
 .history
-.idea
+.idea
+
+# environment variables
+!.env.example
+.env
+.env.*

.prettierignore

@@ -0,0 +1,4 @@
+
+CHANGELOG.md
+coverage
+public

.prettierrc.cjs

@@ -0,0 +1 @@
+module.exports = require('@shm-open/eslint-config-bundle/prettier');