diff --git a/.dockerignore b/.dockerignore new file mode 100644 index 0000000..4b910a2 --- /dev/null +++ b/.dockerignore @@ -0,0 +1,9 @@ +* +!nginx +!frontend +!web +!go.mod +!go.sum +!package-lock.json +!package.json +!webpack.config.js \ No newline at end of file diff --git a/.github/workflows/image-make-and-publish.yml b/.github/workflows/image-make-and-publish.yml new file mode 100644 index 0000000..f9276d5 --- /dev/null +++ b/.github/workflows/image-make-and-publish.yml @@ -0,0 +1,58 @@ +name: Docker + +on: + push: + branches: [ master ] + +env: + REGISTRY: ghcr.io + IMAGE_NAME: ${{ github.repository }} + +jobs: + build: + + runs-on: ubuntu-latest + permissions: + contents: read + packages: write + id-token: write + + steps: + - name: Checkout repository + uses: actions/checkout@v2 + + - name: Install cosign + if: github.event_name != 'pull_request' + uses: sigstore/cosign-installer@main + + - name: Setup Docker buildx + uses: docker/setup-buildx-action@v1 + + - name: Log into registry ${{ env.REGISTRY }} + if: github.event_name != 'pull_request' + uses: docker/login-action@v1 + with: + registry: ${{ env.REGISTRY }} + username: ${{ github.actor }} + password: ${{ secrets.GITHUB_TOKEN }} + + - name: Extract Docker metadata + id: meta + uses: docker/metadata-action@v3 + with: + images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} + + - name: Build and push Docker image + id: build-and-push + uses: docker/build-push-action@v2 + with: + context: . + push: ${{ github.event_name != 'pull_request' }} + tags: ${{ steps.meta.outputs.tags }} + labels: ${{ steps.meta.outputs.labels }} + + - name: Sign the published Docker image + if: ${{ github.event_name != 'pull_request' && !github.event.repository.private }} + env: + COSIGN_EXPERIMENTAL: "true" + run: cosign sign ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.build-and-push.outputs.digest }} diff --git a/Dockerfile b/Dockerfile new file mode 100644 index 0000000..48fe088 --- /dev/null +++ b/Dockerfile @@ -0,0 +1,64 @@ +# syntax = docker/dockerfile:1.2 +FROM registry.access.redhat.com/ubi8/ubi as go-builder + +RUN dnf makecache + +WORKDIR /usr/src/nikita-tokarch-uk-frontend + +RUN dnf install -yq golang + +COPY go.mod . +COPY go.sum . + +RUN --mount=type=cache,id=gopath,target=${GOPATH} \ + go mod \ + download + +ARG APP_VERSION=containerized + +COPY frontend frontend + +RUN --mount=type=cache,id=gopath,target=${GOPATH} \ + go build \ + -o nikita-tokarch-uk-frontend \ + -ldflags "-X main.Version=${APP_VERSION}" \ + code.tokarch.uk/mainnika/nikita-tokarch-uk/frontend + +FROM registry.access.redhat.com/ubi8/ubi as js-builder + +RUN dnf makecache + +WORKDIR /usr/src/nikita-tokarch-uk-frontend + +RUN dnf install -yq nodejs npm + +COPY package-lock.json . +COPY package.json . + +RUN npm ci + +ARG NODE_ENV=production + +COPY webpack.config.js . +COPY web web + +RUN npm run build + +FROM registry.access.redhat.com/ubi8/ubi as final + +RUN dnf makecache +RUN dnf install -yq nginx + +RUN mv /usr/share/nginx/html/index.html /usr/share/nginx/html/version.html + +COPY nginx /etc/nginx + +COPY --from=go-builder \ + /usr/src/nikita-tokarch-uk-frontend/nikita-tokarch-uk-frontend \ + /usr/local/bin/nikita-tokarch-uk-frontend + +COPY --from=js-builder \ + /usr/src/nikita-tokarch-uk-frontend/out \ + /usr/share/nginx/html + +CMD ["/bin/false"] \ No newline at end of file diff --git a/nginx/nginx.conf b/nginx/nginx.conf new file mode 100644 index 0000000..c1c02c7 --- /dev/null +++ b/nginx/nginx.conf @@ -0,0 +1,45 @@ +daemon off; +user nginx; +worker_processes auto; +error_log /var/log/nginx/error.log; +pid /run/nginx.pid; + +events { + worker_connections 1024; +} + +http { + log_format main '$remote_addr - $remote_user [$time_local] "$request" ' + '$status $body_bytes_sent "$http_referer" ' + '"$http_user_agent" "$http_x_forwarded_for"'; + + access_log /var/log/nginx/access.log main; + + sendfile on; + tcp_nopush on; + tcp_nodelay on; + keepalive_timeout 65; + types_hash_max_size 2048; + + include /etc/nginx/mime.types; + default_type application/octet-stream; + + upstream frontend { + include /etc/nginx/upstream/*.server; + } + + server { + listen 80 default_server; + listen [::]:80 default_server; + server_name _; + root /usr/share/nginx/html; + + location / { + try_files $uri $uri/ @frontend; + } + + location @frontend { + proxy_pass http://frontend; + } + } +} diff --git a/nginx/upstream/default.server b/nginx/upstream/default.server new file mode 100644 index 0000000..4d450ea --- /dev/null +++ b/nginx/upstream/default.server @@ -0,0 +1 @@ +server 127.0.0.1:8000; \ No newline at end of file