infisical/backend/src/utils/setup/index.ts

import * as Sentry from "@sentry/node";
import { DatabaseService, TelemetryService } from "../../services";
import { setTransporter } from "../../helpers/nodemailer";
import { EELicenseService } from "../../ee/services";
import { initSmtp } from "../../services/smtp";
import { createTestUserForDevelopment } from "../addDevelopmentUser";
// eslint-disable-next-line @typescript-eslint/no-var-requires
import { validateEncryptionKeysConfig } from "./validateConfig";
import {
  backfillSecretVersions,
  backfillBots,
  backfillSecretBlindIndexData,
  backfillEncryptionMetadata,
  backfillSecretFolders,
  backfillServiceToken,
} from "./backfillData";
import {
  reencryptBotPrivateKeys,
  reencryptSecretBlindIndexDataSalts,
} from "./reencryptData";
import {
  getNodeEnv,
  getMongoURL,
  getSentryDSN,
  getClientSecretGoogle,
  getClientIdGoogle,
} from "../../config";
import { initializePassport } from "../auth";

/**
 * Prepare Infisical upon startup. This includes tasks like:
 * - Log initial telemetry message
 * - Initializing SMTP configuration
 * - Initializing the instance global feature set (if applicable)
 * - Initializing the database connection
 * - Initializing Sentry
 * - Backfilling data
 * - Re-encrypting data
 */
export const setup = async () => {
  await validateEncryptionKeysConfig();
  await TelemetryService.logTelemetryMessage();

  // initializing SMTP configuration
  setTransporter(await initSmtp());

  // initializing global feature set
  await EELicenseService.initGlobalFeatureSet();

  // initializing the database connection
  await DatabaseService.initDatabase(await getMongoURL());

  const googleClientSecret: string = await getClientSecretGoogle();
  const googleClientId: string = await getClientIdGoogle();

  if (googleClientId && googleClientSecret) {
    await initializePassport();
  }

  // re-encrypt any data previously encrypted under server hex 128-bit ENCRYPTION_KEY
  // to base64 256-bit ROOT_ENCRYPTION_KEY
  // await reencryptBotPrivateKeys();
  // await reencryptSecretBlindIndexDataSalts();

  // initializing the database connection
  await DatabaseService.initDatabase(await getMongoURL());

  /**
   * NOTE: the order in this setup function is critical.
   * It is important to backfill data before performing any re-encryption functionality.
   */

  // backfilling data to catch up with new collections and updated fields
  await backfillSecretVersions();
  await backfillBots();
  await backfillSecretBlindIndexData();
  await backfillEncryptionMetadata();
  await backfillSecretFolders();
  await backfillServiceToken();

  // re-encrypt any data previously encrypted under server hex 128-bit ENCRYPTION_KEY
  // to base64 256-bit ROOT_ENCRYPTION_KEY
  await reencryptBotPrivateKeys();
  await reencryptSecretBlindIndexDataSalts();

  // initializing Sentry
  Sentry.init({
    dsn: await getSentryDSN(),
    tracesSampleRate: 1.0,
    debug: (await getNodeEnv()) === "production" ? false : true,
    environment: await getNodeEnv(),
  });

  await createTestUserForDevelopment();
};