chore(ci): streamline Docker workflow with ARM64 optimization and updated caching strategies

.gitea/workflows/docker-publish.yaml

@@ -1,132 +1,65 @@
-name: Build and Publish Docker Images
+name: Docker Build & Publish (ARM64 Optimized)
 run-name: Build & Publish by @${{ github.actor }}
 
 on:
   push:
-    branches: [ "main" ]
+    branches: [ main ]
-    paths:
+    tags: [ 'v*' ]
-      - 'backend/**'
-      - 'platform/**'
-      - 'core/**'
-      - 'frontend/**'
-      - 'config/docker/**'
-      - 'build.gradle.kts'
-      - 'settings.gradle.kts'
-      - 'gradle.properties'
-      - 'docker-compose.yaml'
-      - '.gitea/workflows/docker-publish.yaml'
-
-env:
-  REGISTRY: git.mo-code.at
-  # WICHTIG: Kleingeschrieben für Docker-Konformität
-  IMAGE_PREFIX: mocode-software/meldestelle
-  # Build Arguments für Zora (ARM64 Power)
-  JAVA_VERSION: "25"
-  GRADLE_VERSION: "9.3.1"
-  # OPTIMIERUNG: Gradle Parameter für mehr Speed
-  GRADLE_OPTS: "-Dorg.gradle.parallel=true -Dorg.gradle.workers.max=8"
-  # Deine neuen JVM Power-Flags für ARM64 (Cortex-A720)
-  JVM_OPTS_ARM64: "-XX:ActiveProcessorCount=12 -XX:+UseG1GC -XX:+UseTransparentHugePages -XX:+UseSVE=1"
 
 jobs:
-  build-and-push:
+  build:
+    # Nutze ein Label, das deinen ARM64-Runner anspricht (z.B. ubuntu-latest oder arm64)
     runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
-      matrix:
-        include:
-          - service: keycloak
-            context: .
-            dockerfile: config/docker/keycloak/Dockerfile
-            image: keycloak
-          - service: api-gateway
-            context: .
-            dockerfile: backend/infrastructure/gateway/Dockerfile
-            image: gateway
-          - service: ping-service
-            context: .
-            dockerfile: backend/services/ping/Dockerfile
-            image: ping-service
-          - service: web-app
-            context: .
-            dockerfile: config/docker/caddy/web-app/Dockerfile
-            image: web-app
 
     steps:
-      - name: Checkout repository
+      - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
-      # Java Setup (Wichtig für Gradle-Builds im Runner)
+      - name: Set up JDK 21 (Temurin)
-      - name: Set up JDK 25
         uses: actions/setup-java@v4
         with:
-          java-version: '25'
+          java-version: '21'
           distribution: 'temurin'
+          # Aktiviert automatisches Caching für Maven oder Gradle
+          cache: 'gradle'
 
-      # Cache für Gradle (Beschleunigt Folgebauvorgänge massiv)
+      - name: Grant execute permission for gradlew
-      - name: Setup Gradle Cache
+        run: chmod +x gradlew
-        uses: actions/cache@v3
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
-          restore-keys: |
-            ${{ runner.os }}-gradle-
 
-      # Frontend Build (Nur für web-app notwendig)
+      - name: Build with Gradle
-      - name: Build Frontend (Kotlin JS)
+        # --no-daemon ist in CI-Umgebungen stabiler
-        if: matrix.service == 'web-app'
+        run: ./gradlew build --no-daemon
-        run: |
-          chmod +x gradlew
-          # Wir nutzen --no-daemon im Runner, geben aber mehr Memory
-          ./gradlew :frontend:shells:meldestelle-portal:jsBrowserDistribution \
-            -Pproduction=true \
-            --max-workers=8 \
-            -Dkotlin.daemon.jvm.options="-Xmx4g"
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
-        with:
-          # Wir erzwingen die Nutzung des Host-Drivers,
-          # um gRPC-Abstürze im Container-Builder zu vermeiden
-          driver: docker
 
-      # Login bei deiner Gitea Registry
+      - name: Login to Gitea Container Registry
-      - name: Log in to the Container registry
         uses: docker/login-action@v3
         with:
-          registry: ${{ env.REGISTRY }}
+          registry: ${{ gitea.repository_url }} # Oder deine spezifische URL
-          username: ${{ secrets.REGISTRY_USER }}
+          username: ${{ gitea.actor }}
-          password: ${{ secrets.REGISTRY_TOKEN }}
+          password: ${{ secrets.GITEA_TOKEN }}
 
-      # Metadaten extrahieren (Tags, Labels)
+      - name: Extract Metadata (Tags, Labels)
-      - name: Extract metadata
         id: meta
         uses: docker/metadata-action@v5
         with:
-          images: ${{ env.REGISTRY }}/${{ env.IMAGE_PREFIX }}/${{ matrix.image }}
+          images: |
+            ${{ gitea.repository_url }}/${{ gitea.repository }}
           tags: |
-            type=raw,value=latest,enable=${{ github.ref == 'refs/heads/main' }}
+            type=ref,event=branch
-            type=sha,format=long
+            type=semver,pattern={{version}}
+            type=sha,format=short
 
-      # Build und Push (Nativ ARM64 für maximale Geschwindigkeit)
+      - name: Build and Push Docker Image
-      - name: Build and push Docker image
+        uses: docker/build-push-action@v6
-        uses: docker/build-push-action@v5
         with:
-          context: ${{ matrix.context }}
+          context: .
-          file: ${{ matrix.dockerfile }}
+          # Nutze natives ARM64-Build, da der Runner bereits auf ARM64 läuft
-          push: true
-          # Fokus auf ARM64 für Zora, AMD64 bleibt für Kompatibilität (optional)
           platforms: linux/arm64
+          push: true
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
-          build-args: |
+          # Nutze das Gitea-interne Caching für Docker-Layer
-            DOCKER_BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ')
+          cache-from: type=gha
-            VERSION=${{ github.sha }}
+          cache-to: type=gha,mode=max
-            GRADLE_VERSION=${{ env.GRADLE_VERSION }}
-            JAVA_VERSION=${{ env.JAVA_VERSION }}
-            KEYCLOAK_IMAGE_TAG=26.4
-            JVM_OPTS_APPEND=${{ env.JVM_OPTS_ARM64 }}
-          cache-from: type=local,src=/tmp/.buildx-cache
-          cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max