Frontend checklist

.babelrc

@@ -0,0 +1,13 @@
+{
+  "presets": [
+    [
+      "@babel/preset-env",
+      {
+        "useBuiltIns": "entry",
+        "corejs": "3.6.5",
+        "modules": false
+      }
+    ],
+    "@babel/preset-typescript"
+  ]
+}

.browserslistrc

@@ -0,0 +1,13 @@
+# https://github.com/browserslist/browserslist#readme
+
+>= 1%
+last 1 major version
+not dead
+Chrome >= 45
+Firefox >= 38
+Edge >= 12
+Explorer >= 10
+iOS >= 9
+Safari >= 9
+Android >= 4.4
+Opera >= 30

.circleci/config.yml

@@ -0,0 +1,92 @@
+version: 2.1
+
+orbs:
+  buildkit: springload/[email protected]
+
+workflows:
+  build_test_and_push_image:
+    jobs:
+      - buildkit/builder:
+          cache_version: v4
+          builds:
+            - buildkit/build: # call the build command multiple times to build multiple images
+                target: frontend # build this stage
+                tag: frontend # no tag no docker image
+                path: docker
+            - buildkit/build: # call the build command multiple times to build multiple images
+                target: aws-app # build this stage
+                tag: app # no tag no docker image
+                path: docker
+            - buildkit/build: # call the build command multiple times to build multiple images
+                target: app-test # build this stage
+                tag: app-test # no tag no docker image
+                path: docker
+          after-builds:
+            - run:
+                name: run backend tests
+                command: |-
+                    set -eu
+
+                    docker run --name=database \
+                        -ePOSTGRES_DB=app \
+                        -ePOSTGRES_PASSWORD=password \
+                        -d postgres:11-alpine
+                    docker run \
+                        -i --rm --name=app-test \
+                        -u root \
+                        --link=database \
+                        -eDATABASE_URL="postgres://postgres:password@database/app" \
+                        -eAPP_SECRET_KEY=xxxx \
+                        -eENVIRONMENT=test \
+                        app-test
+            - run:
+                name: tag, push and deploy images
+                command: |-
+                    set -eu
+                    if [ "${CIRCLE_BRANCH}" == "deploy/preview" ] || [ "${CIRCLE_BRANCH}" == "deploy/production" ]; then
+                      ENVIRONMENT=`basename "${CIRCLE_BRANCH}"`
+                      PROJECT=ietf
+                      VERSION=$(git rev-parse --short HEAD)
+                      wget -O ecs-tool.tar.gz https://github.com/springload/ecs-tool/releases/download/1.5.1/ecs-tool_1.5.1_linux_amd64.tar.gz && tar -C /usr/bin -xvf ecs-tool.tar.gz ecs-tool
+                      apk add jq
+                      export AWS_REGION=us-west-2
+                      export AWS_DEFAULT_REGION=us-west-2
+                      export REPOSITORY=$(ecs-tool ecr-endpoint)
+                      eval $(ecs-tool ecr-login)
+                      pids=""
+                      for image in app; do
+                        for tag in ${ENVIRONMENT}-${VERSION} ${ENVIRONMENT}-latest; do
+                          docker tag ${image} ${REPOSITORY}/${PROJECT}-${image}:${tag}
+                          docker push ${REPOSITORY}/${PROJECT}-${image}:${tag} &
+                          pids="${pids} $!"
+                        done
+                      done
+                      for p in $pids; do
+                        wait $p
+                      done
+
+                      # running the pre-deployment commands
+                      ecs-tool -p "" --config ".circleci/ecs-${ENVIRONMENT}.toml" run --image_tag "${ENVIRONMENT}-${VERSION}" -- ./deploy.sh
+                      # deploy new services in parallel
+                      ecs-tool -p "" --config ".circleci/ecs-${ENVIRONMENT}.toml" deploy --image_tag "${ENVIRONMENT}-${VERSION}"
+                    fi
+            - run:
+                name: test the website
+                command: |-
+                    set -eu
+
+                    if [ "${CIRCLE_BRANCH}" == "deploy/preview" ] || [ "${CIRCLE_BRANCH}" == "deploy/production" ]; then
+                      ENVIRONMENT=`basename "${CIRCLE_BRANCH}"`
+                      # add more environments / endpoints as needed
+                      case "${ENVIRONMENT}" in
+                        production)
+                          endpoint=https://www.ietf.org
+                          ;;
+                        preview)
+                          endpoint=https://wwwdev.ietf.org
+                          ;;
+                      esac
+
+
+                      docker run --rm -e BASIC_AUTH=$BASIC_AUTH frontend yarn test $endpoint
+                    fi

.circleci/ecs-preview.toml

@@ -0,0 +1,8 @@
+profile = "ietf"
+cluster = "ietf-preview"
+task_definition = "ietf-preview-app"
+container_name = "app"
+log_group = "ecs-tool"
+
+[deploy]
+services = ["app"]

.dockerignore

@@ -0,0 +1,5 @@
+*.sql
+media*.tgz
+.git
+media/
+docker/database

.eslintignore

@@ -0,0 +1,3 @@
+public/
+node_modules/
+

.eslintrc.js

@@ -0,0 +1,11 @@
+module.exports = {
+    root: true,
+    parser: '@typescript-eslint/parser',
+    plugins: ['@typescript-eslint'],
+    extends: [
+        'eslint:recommended',
+        'plugin:@typescript-eslint/eslint-recommended',
+        'plugin:@typescript-eslint/recommended',
+        'plugin:prettier/recommended',
+    ],
+};

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,66 @@
+name: "CodeQL"
+
+on:
+  push:
+    branches: [main, deploy/preview]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [main, deploy/preview]
+  schedule:
+    - cron: '0 0 * * *'
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        # Override automatic language detection by changing the below list
+        # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python']
+        language: ['python', 'javascript']
+        # Learn more...
+        # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v2
+      with:
+        # We must fetch at least the immediate parents so that if this is
+        # a pull request then we can checkout the head.
+        fetch-depth: 2
+
+    # Initializes the CodeQL tools for scanning.
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v1
+      with:
+        languages: ${{ matrix.language }}
+        setup-python-dependencies: false
+        # If you wish to specify custom queries, you can do so here or in a config file.
+        # By default, queries listed here will override any specified in a config file. 
+        # Prefix the list here with "+" to use these queries and those in the config file.
+        # queries: ./path/to/local/query, your-org/your-repo/queries@main
+
+    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
+    # If this step fails, then you should remove it and run the build manually (see below)
+    - name: Autobuild
+      uses: github/codeql-action/autobuild@v1
+
+    # ℹ️ Command-line programs to run using the OS shell.
+    # 📚 https://git.io/JvXDl
+
+    # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
+    #    and modify them (or add more) to build your code if your project
+    #    uses a compiled language
+
+    #- run: |
+    #   make bootstrap
+    #   make release
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v1

.github/workflows/docker-publish.yml

@@ -0,0 +1,67 @@
+name: Docker
+
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+
+on:
+  release:
+    types: [published]
+
+env:
+  # Use docker.io for Docker Hub if empty
+  REGISTRY: ghcr.io
+  # github.repository as <account>/<repo>
+  IMAGE_NAME: ${{ github.repository }}
+
+
+jobs:
+  build:
+
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+      # This is used to complete the identity challenge
+      # with sigstore/fulcio when running outside of PRs.
+      id-token: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v2
+
+      # Workaround: https://github.com/docker/build-push-action/issues/461
+      - name: Setup Docker buildx
+        uses: docker/setup-buildx-action@79abd3f86f79a9d68a23c75a09a9a85889262adf
+
+      # Login against a Docker registry except on PR
+      # https://github.com/docker/login-action
+      - name: Log into registry ${{ env.REGISTRY }}
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@28218f9b04b4f3f62068d7b6ce6ca5b26e35336c
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      # Extract metadata (tags, labels) for Docker
+      # https://github.com/docker/metadata-action
+      - name: Extract Docker metadata
+        id: meta
+        uses: docker/metadata-action@98669ae865ea3cffbcbaa878cf57c20bbf1c6c38
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+
+      # Build and push Docker image with Buildx (don't push on PR)
+      # https://github.com/docker/build-push-action
+      - name: Build and push Docker image
+        id: build-and-push
+        uses: docker/build-push-action@ad44023a93711e3deb337508980b4b5e9bcdc5dc
+        with:
+          context: .
+          file: docker/Dockerfile
+          target: app
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ghcr.io/${{ github.repository }}:${{ github.event.release.tag_name }}, ghcr.io/${{ github.repository }}:latest
+          labels: ${{ steps.meta.outputs.labels }}

.gitignore

@@ -7,3 +7,8 @@
 /docs/_build/
 /ietf/static/node_modules
 /ietf/static/yarn-error.log
+node_modules
+.vscode
+*.log
+ietf/templates/base.html
+ietf/static/dist

.nvmrc

@@ -0,0 +1 @@
+lts/erbium

.prettierignore

@@ -0,0 +1,3 @@
+**/*.html
+**/*.ss
+**/*.yml

.prettierrc

@@ -0,0 +1,13 @@
+{
+  "trailingComma": "all",
+  "tabWidth": 4,
+  "semi": true,
+  "singleQuote": true,
+  "arrowParens": "always",
+  "overrides": [
+    {
+      "files": [".travis.yml", ".*"],
+      "options": { "tabWidth": 2 }
+    }
+  ]
+}