chore: wip

Author: chrisbbreuer

.stacks/core/cloud/src/cloud.ts

@@ -10,6 +10,7 @@ import {
   Stack,
   aws_certificatemanager as acm,
   aws_cloudfront as cloudfront,
+  custom_resources,
   aws_ec2 as ec2,
   aws_efs as efs,
   aws_iam as iam,
@@ -270,13 +271,14 @@ export class StacksCloud extends Stack {
   manageUsers() {
     const teamName = config.team.name
     const users = config.team.members
+    const password = env.AWS_DEFAULT_PASSWORD || string.random()
 
     for (const userName in users) {
       // const userEmail = users[userName]
       const name = `${string.pascalCase(teamName)}${string.pascalCase(userName)}User`
       const user = new iam.User(this, name, {
         userName,
-        password: SecretValue.unsafePlainText(env.AWS_DEFAULT_PASSWORD || string.random()),
+        password: SecretValue.unsafePlainText(password),
         passwordResetRequired: true,
       })
 
@@ -293,11 +295,33 @@ export class StacksCloud extends Stack {
         domainName: this.domain,
       })
 
+      // TODO: fix this – redirects do not work yet
       config.dns.redirects?.forEach((redirect) => {
         const slug = redirect.split('.').map((part, index) => index === 0 ? part : part.charAt(0).toUpperCase() + part.slice(1)).join('') // creates a CamelCase slug from the redirect
         const hostedZone = route53.HostedZone.fromLookup(this, `RedirectHostedZone${slug}`, { domainName: redirect })
         this.redirectZones.push(hostedZone)
       })
+
+      new custom_resources.AwsCustomResource(this, 'VerifyDomainIdentity', {
+        onCreate: {
+          service: 'SES',
+          action: 'verifyDomainIdentity',
+          parameters: {
+            Domain: this.domain,
+          },
+          physicalResourceId: custom_resources.PhysicalResourceId.of('VerifyDomainIdentity'),
+        },
+        policy: custom_resources.AwsCustomResourcePolicy.fromSdkCalls({ resources: custom_resources.AwsCustomResourcePolicy.ANY_RESOURCE }),
+      })
+
+      new route53.MxRecord(this, 'MxRecord', {
+        zone: this.zone,
+        recordName: this.domain,
+        values: [{
+          priority: 10,
+          hostName: 'inbound-smtp.us-east-1.amazonaws.com', // Replace with your SES inbound endpoint
+        }],
+      })
     }
     // if not, lets create it
     catch (error) {

.stacks/core/cloud/src/drivers/aws/email-forwarder.ts

@@ -37,30 +37,29 @@ console.log('AWS Lambda SES Forwarder')
 //
 //   To match all email addresses matching no other mapping, use "@" as a key.
 const defaultConfig = {
-  fromEmail: 'noreply@example.com',
+  fromEmail: 'noreply@stacksjs.org',
   subjectPrefix: '',
-  emailBucket: 's3-bucket-name',
-  emailKeyPrefix: 'emailsPrefix/',
+  emailBucket: 'stacksjs.org-email',
+  emailKeyPrefix: 'stacks/',
   allowPlusSign: true,
   forwardMapping: {
-    'info@example.com': [
-      'example.john@example.com',
-      'example.jen@example.com',
+    'hello@stacksjs.org': [
+      'chrisbreuer93@gmail.com',
     ],
-    'abuse@example.com': [
-      'example.jim@example.com',
-    ],
-    '@example.com': [
-      'example.john@example.com',
-    ],
-    'info': [
-      'info@example.com',
+    // 'abuse@example.com': [
+    //   'example.jim@example.com',
+    // ],
+    '@stacksjs.org': [
+      'chrisbreuer93@gmail.com',
     ],
+    // 'info': [
+    //   'info@example.com',
+    // ],
   },
 }
 
 /**
- * Parses the SES event record provided for the `mail` and `receipients` data.
+ * Parses the SES event record provided for the `mail` and `recipients` data.
  *
  * @param {object} data - Data bundle with context, email, etc.
  *

.stacks/core/env/src/index.ts

@@ -41,7 +41,7 @@ export function process() {
     : p.env as unknown as Env
 }
 
-export const env = new Proxy(process(), handler)
+export const env: Env = new Proxy(process(), handler)
 
 export function writeEnv(key: EnvKey, value: string, options?: { path: string }) {
   const envPath = options?.path || projectPath('.env')

config/services.ts

@@ -13,7 +13,7 @@ export default {
     accountId: env.AWS_ACCOUNT_ID || '',
     appId: env.AWS_ACCESS_KEY_ID || '',
     apiKey: env.AWS_SECRET_ACCESS_KEY || '',
-    region: env.AWS_DEFAULT_REGION || '',
+    region: env.AWS_DEFAULT_REGION || 'us-east-1',
   },
 
   algolia: {