Merge pull request #2 from mainnika/develop

Made docker image

.dockerignore

@@ -0,0 +1,9 @@
+*
+!nginx
+!frontend
+!web
+!go.mod
+!go.sum
+!package-lock.json
+!package.json
+!webpack.config.js

.github/workflows/image-make-and-publish.yml

@@ -0,0 +1,58 @@
+name: Docker
+
+on:
+  push:
+    branches: [ master ]
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+
+jobs:
+  build:
+
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v2
+
+      - name: Install cosign
+        if: github.event_name != 'pull_request'
+        uses: sigstore/cosign-installer@main
+
+      - name: Setup Docker buildx
+        uses: docker/setup-buildx-action@v1
+
+      - name: Log into registry ${{ env.REGISTRY }}
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v1
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract Docker metadata
+        id: meta
+        uses: docker/metadata-action@v3
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+
+      - name: Build and push Docker image
+        id: build-and-push
+        uses: docker/build-push-action@v2
+        with:
+          context: .
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+
+      - name: Sign the published Docker image
+        if: ${{ github.event_name != 'pull_request' && !github.event.repository.private }}
+        env:
+          COSIGN_EXPERIMENTAL: "true"
+        run: cosign sign ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.build-and-push.outputs.digest }}

Dockerfile

@@ -0,0 +1,64 @@
+# syntax = docker/dockerfile:1.2
+FROM registry.access.redhat.com/ubi8/ubi as go-builder
+
+RUN dnf makecache
+
+WORKDIR /usr/src/nikita-tokarch-uk-frontend
+
+RUN dnf install -yq golang
+
+COPY go.mod .
+COPY go.sum .
+
+RUN --mount=type=cache,id=gopath,target=${GOPATH} \
+    go mod \
+      download
+
+ARG APP_VERSION=containerized
+
+COPY frontend frontend
+
+RUN --mount=type=cache,id=gopath,target=${GOPATH} \
+    go build \
+      -o nikita-tokarch-uk-frontend \
+      -ldflags "-X main.Version=${APP_VERSION}" \
+      code.tokarch.uk/mainnika/nikita-tokarch-uk/frontend
+
+FROM registry.access.redhat.com/ubi8/ubi as js-builder
+
+RUN dnf makecache
+
+WORKDIR /usr/src/nikita-tokarch-uk-frontend
+
+RUN dnf install -yq nodejs npm
+
+COPY package-lock.json .
+COPY package.json .
+
+RUN npm ci
+
+ARG NODE_ENV=production
+
+COPY webpack.config.js .
+COPY web web
+
+RUN npm run build
+
+FROM registry.access.redhat.com/ubi8/ubi as final
+
+RUN dnf makecache
+RUN dnf install -yq nginx
+
+RUN mv /usr/share/nginx/html/index.html /usr/share/nginx/html/version.html
+
+COPY nginx /etc/nginx
+
+COPY --from=go-builder \
+    /usr/src/nikita-tokarch-uk-frontend/nikita-tokarch-uk-frontend \
+    /usr/local/bin/nikita-tokarch-uk-frontend
+
+COPY --from=js-builder \
+    /usr/src/nikita-tokarch-uk-frontend/out \
+    /usr/share/nginx/html
+
+CMD ["/bin/false"]

nginx/nginx.conf

@@ -0,0 +1,45 @@
+daemon off;
+user nginx;
+worker_processes auto;
+error_log /var/log/nginx/error.log;
+pid /run/nginx.pid;
+
+events {
+    worker_connections 1024;
+}
+
+http {
+    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+                      '$status $body_bytes_sent "$http_referer" '
+                      '"$http_user_agent" "$http_x_forwarded_for"';
+
+    access_log  /var/log/nginx/access.log  main;
+
+    sendfile            on;
+    tcp_nopush          on;
+    tcp_nodelay         on;
+    keepalive_timeout   65;
+    types_hash_max_size 2048;
+
+    include             /etc/nginx/mime.types;
+    default_type        application/octet-stream;
+
+    upstream frontend {
+        include /etc/nginx/upstream/*.server;
+    }
+
+    server {
+        listen       80 default_server;
+        listen       [::]:80 default_server;
+        server_name  _;
+        root         /usr/share/nginx/html;
+
+        location / {
+            try_files $uri $uri/ @frontend;
+        }
+
+        location @frontend {
+            proxy_pass http://frontend;
+        }
+    }
+}

nginx/upstream/default.server

@@ -0,0 +1 @@
+server 127.0.0.1:8000;