skeet/src/templates/init/skeet-cloud.config.ts

Full-stack TypeScript Serverless Framework

import { getHomeIp } from '@/cli'

export const skeetCloudConfigGen = async (appName: string) => {
  const filePath = `${appName}/skeet-cloud.config.json`
  const homeIp = await getHomeIp()
  const body = `{
  "api": {
    "appName": "${appName}",
    "projectId": "${appName}",
    "region": "europe-west4",
    "hasLoadBalancer": false,
    "cloudRun": {
      "name": "skeet-${appName}-api",
      "url": "",
      "cpu": 1,
      "maxConcurrency": 80,
      "maxInstances": 100,
      "minInstances": 0,
      "memory": "4Gi"
    },
    "db": {
      "databaseVersion": "POSTGRES_14",
      "cpu": 1,
      "memory": "3840MiB",
      "storageSize": 10,
      "whiteList": ""
    }
  },
  "workers": [],
  "taskQueues": [],
  "cloudArmor": [
    {
      "securityPolicyName": "skeet-${appName}-armor",
      "rules": [
        {
          "priority": "10",
          "description": "Allow Your Home IP addresses",
          "options": {
            "src-ip-ranges": "${homeIp}",
            "action": "allow"
          }
        },
        {
          "priority": "20",
          "description": "Allow host",
          "options": {
            "action": "allow",
            "expression": "has(request.headers['referer']) && request.headers['referer'] == 'http://localhost:4000/'"
          }
        },
        {
          "priority": "100",
          "description": "Defense from SQLi attack",
          "options": {
            "action": "deny-403",
            "expression": "evaluatePreconfiguredExpr('sqli-stable')"
          }
        },
        {
          "priority": "200",
          "description": "Defense from XSS attack",
          "options": {
            "action": "deny-403",
            "expression": "evaluatePreconfiguredExpr('xss-stable')"
          }
        },
        {
          "priority": "300",
          "description": "Defense from NodeJS attack",
          "options": {
            "action": "deny-403",
            "expression": "evaluatePreconfiguredExpr('nodejs-v33-stable')"
          }
        },
        {
          "priority": "2147483647",
          "description": "Deny All IP addresses",
          "options": {
            "action": "deny-403"
          }
        }
      ]
    }
  ]
}  
`
  return {
    filePath,
    body,
  }
}