all

.env.example

@@ -0,0 +1,8 @@
+PORT=Port number of the server. (optional)
+PROXY=Proxies for requests (optional) (e.g. ["https://proxy1.com", "https://proxy2.com"])
+REDIS_HOST=Redis host (optional)
+REDIS_PORT=Redis port (optional)
+REDIS_TTL=Redis cache timeout (seconds) (optional)
+REDIS_PASSWORD=Redis password (optional)
+TMDB_KEY=TMDB access token auth (optional)
+NODE_ENV=Environment (optional) (DEMO or PROD)

.github/dependabot.yml

@@ -7,8 +7,10 @@ updates:
     open-pull-requests-limit: 3
     allow:
       - dependency-type: 'production'
+    ignore:
+      - dependency-name: "axios"
   - package-ecosystem: github-actions
     directory: '/'
     schedule:
       interval: daily
-    open-pull-requests-limit: 2
+    open-pull-requests-limit: 2

.github/scripts/install-dependencies.sh

@@ -0,0 +1,2 @@
+#!/bin/bash
+echo "Code BeforeInstall event script ran."

.github/scripts/start-server.sh

@@ -0,0 +1,2 @@
+#!/bin/bash
+echo "Code ApplicationStart event script ran."

.github/scripts/validate-service.sh

@@ -0,0 +1,2 @@
+#!/bin/bash
+echo "Code ValidateService event script ran."

.github/workflows/codeql-analysis.yml

@@ -42,7 +42,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
+      uses: github/codeql-action/init@v3
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -56,7 +56,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v2
+      uses: github/codeql-action/autobuild@v3
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -69,4 +69,4 @@ jobs:
     #   ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2
+      uses: github/codeql-action/analyze@v3

.github/workflows/deploy-pi.yml

@@ -0,0 +1,80 @@
+name: Deploy to Pi (Production)
+
+on:
+  workflow_run:
+    workflows: ["Node.js CI"]
+    types:
+      - completed
+    branches: [master, main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  actions: read
+
+jobs:
+  deploy:
+    runs-on: [self-hosted, production-deploy, api-consumet-only]
+    if: ${{ github.event.workflow_run.conclusion == 'success' || github.event_name == 'workflow_dispatch' }}
+    env:
+      ACTIONS_RUNNER_DEBUG: false
+      ACTIONS_STEP_DEBUG: false
+
+    steps:
+      - name: Validate workflow execution
+        run: |
+          if [[ "${{ github.repository }}" != "consumet/api.consumet.org" ]]; then
+            echo "ERROR: Unauthorized repository: ${{ github.repository }}"
+            exit 1
+          fi
+          if [[ "${{ github.ref }}" != "refs/heads/main" ]] && [[ "${{ github.ref }}" != "refs/heads/master" ]] && [[ "${{ github.event_name }}" != "workflow_dispatch" ]]; then
+            echo "ERROR: Unauthorized branch: ${{ github.ref }}"
+            exit 1
+          fi
+          echo "Workflow validation passed"
+
+      - name: Mask sensitive paths
+        run: |
+          echo "::add-mask::$HOME"
+          echo "::add-mask::$USER"
+          echo "::add-mask::$(pwd)"
+          echo "::add-mask::$(dirname $HOME)"
+          echo "::add-mask::${GITHUB_WORKSPACE}"
+          # Mask runner directory if it exists
+          if [ -d "$HOME/actions-runner" ]; then
+            echo "::add-mask::$HOME/actions-runner"
+          fi
+
+      - name: Checkout code
+        uses: actions/checkout@v3
+        with:
+          clean: false
+          fetch-depth: 1
+
+      - name: Use Node.js 20.x
+        uses: actions/setup-node@v4.0.2
+        with:
+          node-version: "20.x"
+
+      - name: Install dependencies
+        run: |
+          yarn install --silent 2>&1 | grep -v "^warning" || true
+          yarn upgrade --silent 2>&1 | grep -v "^warning" || true
+
+      - name: Build API
+        run: yarn build --silent 2>&1 | tail -5 || true
+
+      - name: Restart PM2 process
+        run: |
+          if pm2 describe consumet-api > /dev/null 2>&1; then
+            pm2 restart consumet-api --silent
+          else
+            pm2 start ecosystem.config.js --silent
+            pm2 save --silent
+          fi
+          echo "PM2 process restarted successfully"
+
+      - name: Check PM2 status
+        run: |
+          pm2 status 2>&1 | grep -E "(id|name|status|cpu|memory)" | head -3
+          echo "Deployment completed"

.github/workflows/docker-ci.yml → .github/workflows/docker-build.yml

@@ -1,4 +1,4 @@
-name: Docker CI
+name: Docker Build
 
 on:
   push:
@@ -18,7 +18,7 @@ jobs:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
       - name: Build and push
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@v4
         with:
           push: true
           tags: ${{ secrets.DOCKERHUB_TAGS }}

.github/workflows/nodejs-ci.yml

@@ -0,0 +1,27 @@
+name: Node.js CI
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+jobs:
+  build:
+
+    runs-on: ubuntu-latest
+
+    strategy:
+      matrix:
+        node-version: [ "18.x" ]
+
+    steps:
+      - uses: actions/checkout@v3
+      - name: Use Node.js ${{ matrix.node-version }}
+        uses: actions/setup-node@v4.0.2
+        with:
+          node-version: ${{ matrix.node-version }}
+      - name: Install dependencies & build
+        run: |
+          npm install
+          npx tsc

.gitignore

@@ -2,4 +2,9 @@ node_modules/
 yarn-error.log
 .env
 src/scripts
-.vscode
+.vscode
+yarn.lock
+test.ts
+dist
+package-lock.json
+yarn.lock

.prettierignore

@@ -0,0 +1,9 @@
+node_modules
+*.js
+*.md
+*.json
+*.lock
+*.yml
+*.yaml
+Dockerfile
+Dockerfile.*

.travis.yml

@@ -0,0 +1,10 @@
+language: node_js
+node_js:
+  - "12.22.12"
+  - 13
+  - 14
+  - 15
+  - 16
+  - 17
+script:
+  - npm run lint

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:16 as builder
+FROM node:20 as builder
 
 LABEL version="1.0.0"
 LABEL description="Consumet API (fastify) Docker Image"
@@ -15,12 +15,16 @@ RUN mkdir -p /home/nodejs/app/node_modules && chown -R nodejs:nodejs /home/nodej
 WORKDIR /home/nodejs/app
 
 # set default node env
-ARG NODE_ENV=development
+ARG NODE_ENV=PROD
 ARG PORT=3000
+
 # ARG NODE_ENV=production
 # to be able to run tests (for example in CI), do not set production as environment
 ENV NODE_ENV=${NODE_ENV}
 ENV PORT=${PORT}
+ENV REDIS_HOST=${REDIS_HOST}
+ENV REDIS_PORT=${REDIS_PORT}
+ENV REDIS_PASSWORD=${REDIS_PASSWORD}
 
 ENV NPM_CONFIG_LOGLEVEL=warn
 
@@ -51,4 +55,4 @@ HEALTHCHECK --interval=30s --timeout=10s --start-period=5s CMD npm run healthche
 # ENTRYPOINT [ "node" ]
 CMD [ "npm", "start" ]
 
-# end.
+# end.

Dockerfile.alpine

@@ -1,4 +1,4 @@
-FROM node:16.16-alpine as builder
+FROM node:20.8-alpine as builder
 
 LABEL version="1.0.0"
 LABEL description="Consumet API (fastify) Docker Image"

Dockerfile.distroless

@@ -1,4 +1,4 @@
-FROM node:14 as builder
+FROM node:20 as builder
 
 LABEL version="1.0.0"
 LABEL description="Consumet API (fastify) Docker Image"
@@ -21,7 +21,7 @@ COPY . .
 
 
 # release layer (the only one in the final image)
-FROM gcr.io/distroless/nodejs:14 AS release
+FROM gcr.io/distroless/nodejs:18 AS release
 COPY --from=builder /app /app
 WORKDIR /app