chore: wip

Author: chrisbbreuer

.env.example

@@ -14,6 +14,7 @@ DB_PASSWORD=
 AWS_ACCESS_KEY_ID=
 AWS_SECRET_ACCESS_KEY=
 AWS_DEFAULT_REGION=us-east-1
+AWS_DEFAULT_PASSWORD=Verysecret123-
 
 MAIL_MAILER=smtp
 MAIL_HOST=mailpit

.stacks/core/cloud/src/cloud.ts

@@ -30,6 +30,9 @@ import { env } from '@stacksjs/env'
 import type { EnvKey } from '~/storage/framework/stacks/env'
 
 const appEnv = config.app.env === 'local' ? 'dev' : config.app.env
+function capitalizeFirstLetter(string: string) {
+  return string.charAt(0).toUpperCase() + string.slice(1)
+}
 
 export class StacksCloud extends Stack {
   domain: string
@@ -66,6 +69,9 @@ export class StacksCloud extends Stack {
     if (!config.app.url)
       throw new Error('Your ./config app.url needs to be defined in order to deploy. You may need to adjust the APP_URL inside your .env file.')
 
+    if (!config.team || Object.keys(config.team).length === 0)
+      throw new Error('Your ./config team needs to at least have one member defined. Please set yourself as a team member and try deploying again.')
+
     this.domain = config.app.url
     this.apiPrefix = config.api.prefix || 'api'
     this.docsPrefix = config.app.docMode ? undefined : config.docs.base
@@ -254,13 +260,20 @@ export class StacksCloud extends Stack {
   }
 
   manageUsers() {
-    const user = new iam.User(this, 'User', {
-      userName: 'chris',
-      password: SecretValue.unsafePlainText(string.random()),
-      passwordResetRequired: true,
-    })
+    const users = config.team
+
+    for (const userName in users) {
+      // const userEmail = users[userName]
+      const user = new iam.User(this, `${capitalizeFirstLetter(userName)}User`, {
+        userName,
+        password: SecretValue.unsafePlainText(env.AWS_DEFAULT_PASSWORD || string.random()),
+        passwordResetRequired: true,
+      })
+
+      user.addManagedPolicy(iam.ManagedPolicy.fromAwsManagedPolicyName('AdministratorAccess'))
 
-    user.addManagedPolicy(iam.ManagedPolicy.fromAwsManagedPolicyName('AmazonS3FullAccess'))
+      // TODO: email the userEmail their credentials
+    }
   }
 
   manageZone() {

.stacks/core/config/src/config.ts

@@ -28,6 +28,7 @@ export const {
   searchEngine,
   services,
   storage,
+  team,
   ui,
 }: StacksOptions = config
 

.stacks/core/config/src/defaults.ts

@@ -467,6 +467,8 @@ export default {
     driver: 's3',
   },
 
+  team: {},
+
   ui: {
     shortcuts: [
       ['btn', 'inline-flex items-center px-4 py-2 ml-2 border border-transparent shadow-sm text-base font-medium rounded-md text-white bg-indigo-600 hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500 cursor-pointer'],

.stacks/core/config/src/overrides.ts

@@ -18,6 +18,7 @@ import storage from '~/config/storage'
 import searchEngine from '~/config/search-engine'
 import security from '~/config/security'
 import services from '~/config/services'
+import team from '~/config/team'
 import ui from '~/config/ui'
 
 // this "user config" will override the default config options
@@ -41,5 +42,6 @@ export default {
   security,
   services,
   storage,
+  team,
   ui,
 } satisfies StacksConfig

.stacks/core/types/src/stacks.ts

@@ -19,6 +19,7 @@ import type {
   SecurityConfig,
   ServicesConfig,
   StorageConfig,
+  Team,
   UiConfig,
 } from './'
 
@@ -210,6 +211,15 @@ export interface StacksOptions {
    */
   storage: StorageConfig
 
+  /**
+   * **Team Members**
+   *
+   * This configuration defines all of your Team members. Because Stacks is fully-typed, you
+   * may hover any of the options below and the definitions will be provided. In case you
+   * have any questions, feel free to reach out via Discord or GitHub Discussions.
+   */
+  team: Team
+
   /**
    * **UI Options**
    *

.stacks/core/types/src/team.ts

@@ -1,3 +1,6 @@
+type TeamMemberName = string
+type Email = string
+
 export interface Team {
-  [key: string]: string
+  [key: TeamMemberName]: Email
 }

config/env.ts

@@ -29,6 +29,7 @@ export default {
   AWS_ACCESS_KEY_ID: validate.string(),
   AWS_SECRET_ACCESS_KEY: validate.string(),
   AWS_DEFAULT_REGION: validate.string(),
+  AWS_DEFAULT_PASSWORD: validate.string(),
 
   MAIL_MAILER: validate.enum(['smtp', 'mailgun', 'ses', 'postmark', 'sendmail', 'log']),
   MAIL_HOST: validate.string(),

storage/framework/stacks/env.ts

@@ -21,6 +21,7 @@ export const envKeys = [
   'AWS_ACCESS_KEY_ID',
   'AWS_SECRET_ACCESS_KEY',
   'AWS_DEFAULT_REGION',
+  'AWS_DEFAULT_PASSWORD',
   'MAIL_MAILER',
   'MAIL_HOST',
   'MAIL_PORT',