nilsandClaude
16d2a56a78
ci / docker (push) Successful in 13s
Rust (axum + sqlx) API and worker sharing a Postgres-backed job queue (SKIP LOCKED, heartbeat, reaper, typed statuses), S3 storage with derived keys and a fully private bucket, OIDC photographer login with per-request allowlist checks, client share links with argon2 passwords and lockout, cookie-based image authorization with sliding expiry, hand-rolled spec-compliant streaming ZIP downloads with exact Content-Length, React + Vite gallery frontend, single Docker image, Helm chart for external S3 + Postgres, and Gitea CI. Co-Authored-By: Claude <noreply@anthropic.com>
31 lines
872 B
Docker
31 lines
872 B
Docker
# ---- frontend ----
|
|
FROM node:22-alpine AS frontend
|
|
WORKDIR /app
|
|
COPY frontend/package.json frontend/package-lock.json* ./
|
|
RUN npm install
|
|
COPY frontend/ ./
|
|
RUN npm run build
|
|
|
|
# ---- backend ----
|
|
FROM rust:1-bookworm AS backend
|
|
WORKDIR /app
|
|
COPY Cargo.toml Cargo.lock* ./
|
|
COPY src ./src
|
|
COPY migrations ./migrations
|
|
RUN cargo build --release --bins
|
|
|
|
# ---- runtime (shared by api and worker) ----
|
|
FROM debian:bookworm-slim
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends exiftool ca-certificates \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
RUN useradd --system --uid 1000 photos
|
|
WORKDIR /app
|
|
COPY --from=backend /app/target/release/server /app/target/release/worker /usr/local/bin/
|
|
COPY --from=frontend /app/dist /app/static
|
|
ENV STATIC_DIR=/app/static
|
|
USER photos
|
|
EXPOSE 8080
|
|
# The worker deployment overrides this with: command ["worker"]
|
|
CMD ["server"]
|