fix:

2025-12-04 03:34:11 +01:00
parent 95fe3e0573
commit 80ac574116
57 changed files with 583 additions and 1418 deletions
@@ -0,0 +1,141 @@
+# ===================================================================
+# Multi-stage Dockerfile Template for Kotlin Multiplatform Web Client
+# Features: Kotlin/JS compilation, Nginx serving, development support, centralized version management
+# Version: 3.0.0 - Central Version Management Implementation
+# ===================================================================
+# IMPORTANT: Build arguments are now managed centrally via docker/versions.toml
+# Use: docker-compose build or scripts/docker-build.sh for automated version injection
+
+# === CENTRALIZED BUILD ARGUMENTS ===
+# Values sourced from docker/versions.toml and docker/build-args/
+# Global arguments (docker/build-args/global.env)
+ARG GRADLE_VERSION
+ARG JAVA_VERSION
+ARG BUILD_DATE
+ARG VERSION
+
+# Client-specific arguments (docker/build-args/clients.env)
+ARG NODE_VERSION
+ARG NGINX_VERSION
+
+# Client-specific build arguments (can be overridden at build time)
+ARG CLIENT_PATH=client/web-app
+ARG CLIENT_MODULE=client:web-app
+ARG CLIENT_NAME=web-app
+
+# ===================================================================
+# Build Stage - Kotlin/JS Compilation
+# ===================================================================
+FROM gradle:${GRADLE_VERSION}-jdk${JAVA_VERSION}-alpine AS kotlin-builder
+
+# Re-declare build arguments for kotlin-builder stage
+ARG CLIENT_PATH=client/web-app
+ARG CLIENT_MODULE=client:web-app
+ARG CLIENT_NAME=web-app
+ARG NODE_VERSION
+
+LABEL stage=kotlin-builder
+LABEL maintainer="Meldestelle Development Team"
+
+WORKDIR /workspace
+
+# Install specific Node.js version for Kotlin/JS compatibility
+RUN apk add --no-cache wget ca-certificates && \
+    wget -q -O - https://unofficial-builds.nodejs.org/download/release/v${NODE_VERSION}/node-v${NODE_VERSION}-linux-x64-musl.tar.xz | \
+    tar -xJ -C /usr/local --strip-components=1 && \
+    apk del wget ca-certificates && \
+    rm -rf /var/cache/apk/* && \
+    npm config set cache /tmp/.npm-cache && \
+    npm config set progress false && \
+    npm config set audit false
+
+# Gradle optimizations for Kotlin Multiplatform builds
+ENV GRADLE_OPTS="-Dorg.gradle.caching=true \
+                 -Dorg.gradle.daemon=false \
+                 -Dorg.gradle.parallel=true \
+                 -Dorg.gradle.configureondemand=true \
+                 -Dorg.gradle.jvmargs=-Xmx3g \
+                 -Dkotlin.compiler.execution.strategy=in-process"
+
+# Kotlin/JS and Node.js environment variables
+ENV NODE_OPTIONS="--max-old-space-size=4096" \
+    NPM_CONFIG_CACHE="/tmp/.npm-cache" \
+    KOTLIN_JS_GENERATE_EXTERNALS=false
+
+# Copy build configuration files first for optimal caching
+COPY gradlew gradlew.bat gradle.properties settings.gradle.kts ./
+COPY gradle/ gradle/
+COPY build.gradle.kts ./
+
+# Copy platform and core dependencies
+COPY platform/ platform/
+COPY core/ core/
+
+# Copy client modules in dependency order
+COPY client/common-ui/ client/common-ui/
+COPY ${CLIENT_PATH}/ ${CLIENT_PATH}/
+
+# Clear npm cache and verify Node.js installation
+RUN npm cache clean --force && \
+    node --version && npm --version
+
+# Download dependencies in a separate layer
+RUN ./gradlew :${CLIENT_MODULE}:dependencies --no-daemon --info --stacktrace
+
+# Build web application with production optimizations and better error handling
+RUN ./gradlew :${CLIENT_MODULE}:jsBrowserProductionWebpack --no-daemon --info --stacktrace --debug
+
+# Verify build output
+RUN ls -la /workspace/${CLIENT_PATH}/build/dist/ || (echo "Build failed - no dist directory found" && exit 1)
+
+# ===================================================================
+# Production Stage - Nginx serving
+# ===================================================================
+FROM nginx:${NGINX_VERSION} AS runtime
+
+# Re-declare build arguments for runtime stage
+ARG CLIENT_PATH=client/web-app
+ARG CLIENT_MODULE=client:web-app
+ARG CLIENT_NAME=web-app
+
+# Metadata
+LABEL service="${CLIENT_NAME}" \
+      version="1.0.0" \
+      description="Kotlin Multiplatform Web Client for Meldestelle" \
+      maintainer="Meldestelle Development Team"
+
+# Security and system setup
+RUN apk update && \
+    apk upgrade && \
+    apk add --no-cache curl jq && \
+    rm -rf /var/cache/apk/*
+
+# Remove default nginx content and logs
+RUN rm -rf /usr/share/nginx/html/* && \
+    rm -f /var/log/nginx/*.log
+
+# Copy built web application from builder stage
+COPY --from=kotlin-builder /workspace/${CLIENT_PATH}/build/dist/ /usr/share/nginx/html/
+
+# Copy nginx configuration
+COPY ${CLIENT_PATH}/nginx.conf /etc/nginx/nginx.conf
+
+# Set proper permissions for nginx
+RUN chown -R nginx:nginx /usr/share/nginx/html /var/cache/nginx /var/run /var/log/nginx && \
+    chmod -R 755 /usr/share/nginx/html
+
+# Switch to nginx user for security
+USER nginx
+
+# Health check specifically for the web application
+HEALTHCHECK --interval=30s --timeout=5s --start-period=15s --retries=3 \
+    CMD curl -f http://localhost/health || exit 1
+
+# Expose HTTP port
+EXPOSE 80
+
+# Start nginx with proper signal handling for graceful shutdowns
+STOPSIGNAL SIGQUIT
+
+# Run nginx in foreground with error handling
+CMD ["sh", "-c", "nginx -t && exec nginx -g 'daemon off;'"]
@@ -0,0 +1,147 @@
+# syntax=docker/dockerfile:1.7
+
+# ===================================================================
+# Multi-stage Dockerfile Template for Spring Boot Services
+# Features: Security hardening, monitoring support, optimal caching, centralized version management
+# Version: 3.0.0 - Central Version Management Implementation
+# ===================================================================
+# IMPORTANT: Build arguments are now managed centrally via docker/versions.toml
+# Use: docker-compose build or scripts/docker-build.sh for automated version injection
+
+# === CENTRALIZED BUILD ARGUMENTS ===
+# Values sourced from docker/versions.toml and docker/build-args/
+# Global arguments (docker/build-args/global.env)
+ARG GRADLE_VERSION
+ARG JAVA_VERSION
+ARG BUILD_DATE
+ARG VERSION
+
+# Service-specific arguments (docker/build-args/services.env or infrastructure.env)
+# Note: No runtime profiles/ports as build ARGs
+ARG SERVICE_PATH=.
+ARG SERVICE_NAME=spring-boot-service
+
+# ===================================================================
+# Build Stage
+# ===================================================================
+FROM gradle:${GRADLE_VERSION}-jdk${JAVA_VERSION}-alpine AS builder
+
+# Re-declare build arguments for this stage
+ARG SERVICE_PATH=.
+ARG SERVICE_NAME=spring-boot-service
+
+LABEL stage=builder
+LABEL maintainer="Meldestelle Development Team"
+
+WORKDIR /workspace
+
+# Gradle optimizations
+ENV GRADLE_OPTS="-Dorg.gradle.caching=true \
+                 -Dorg.gradle.daemon=false \
+                 -Dorg.gradle.parallel=true \
+                 -Dorg.gradle.configureondemand=true \
+                 -Xmx2g"
+
+# Copy build files in optimal order for caching
+COPY gradlew gradlew.bat gradle.properties settings.gradle.kts ./
+COPY gradle/ gradle/
+COPY platform/ platform/
+COPY build.gradle.kts ./
+
+# Create standalone project structure when using template generically
+RUN if [ "${SERVICE_PATH}" = "." ]; then \
+        echo "Creating isolated standalone Spring Boot application..."; \
+        mkdir -p /tmp/standalone-app/src/main/kotlin/com/example /tmp/standalone-app/src/main/resources; \
+        cd /tmp/standalone-app; \
+        echo 'plugins { id("org.springframework.boot") version "3.2.0"; id("io.spring.dependency-management") version "1.1.4"; kotlin("jvm") version "2.2.0"; kotlin("plugin.spring") version "2.2.0" }' > build.gradle.kts; \
+        echo 'group = "com.example"; version = "1.0.0"; java { sourceCompatibility = JavaVersion.VERSION_21 }' >> build.gradle.kts; \
+        echo 'repositories { mavenCentral() }' >> build.gradle.kts; \
+        echo 'dependencies { implementation("org.springframework.boot:spring-boot-starter-web"); testImplementation("org.springframework.boot:spring-boot-starter-test") }' >> build.gradle.kts; \
+        echo 'package com.example; import org.springframework.boot.autoconfigure.SpringBootApplication; import org.springframework.boot.runApplication; @SpringBootApplication class Application; fun main(args: Array<String>) { runApplication<Application>(*args) }' > src/main/kotlin/com/example/Application.kt; \
+        echo 'rootProject.name = "standalone-app"' > settings.gradle.kts; \
+        cp /workspace/gradlew /workspace/gradlew.bat .; \
+        cp -r /workspace/gradle .; \
+        echo "Building standalone application..."; \
+        ./gradlew bootJar --no-daemon --info; \
+        cp build/libs/*.jar /workspace/app.jar; \
+    else \
+        echo "Building specific service: ${SERVICE_NAME}"; \
+        ./gradlew :${SERVICE_NAME}:dependencies --no-daemon --info; \
+        ./gradlew :${SERVICE_NAME}:bootJar --no-daemon --info; \
+        cp ${SERVICE_PATH}/build/libs/*.jar /workspace/app.jar; \
+    fi
+
+# ===================================================================
+# Runtime Stage
+# ===================================================================
+FROM eclipse-temurin:${JAVA_VERSION}-jre-alpine AS runtime
+
+# Metadata
+LABEL service="${SERVICE_NAME}" \
+      version="1.0.0" \
+      maintainer="Meldestelle Development Team" \
+      java.version="${JAVA_VERSION}"
+
+# Build arguments
+ARG APP_USER=appuser
+ARG APP_GROUP=appgroup
+ARG APP_UID=1001
+ARG APP_GID=1001
+
+WORKDIR /app
+
+# System setup
+RUN apk update && \
+    apk upgrade && \
+    apk add --no-cache curl jq tzdata && \
+    rm -rf /var/cache/apk/*
+
+# Non-root user creation
+RUN addgroup -g ${APP_GID} -S ${APP_GROUP} && \
+    adduser -u ${APP_UID} -S ${APP_USER} -G ${APP_GROUP} -h /app -s /bin/sh
+
+# Directory setup
+RUN mkdir -p /app/logs /app/tmp && \
+    chown -R ${APP_USER}:${APP_GROUP} /app
+
+# Re-declare build arguments for runtime stage
+ARG SERVICE_PATH=.
+ARG SERVICE_NAME=spring-boot-service
+
+# Copy JAR (different locations for standalone vs service-specific builds)
+COPY --from=builder --chown=${APP_USER}:${APP_GROUP} \
+     /workspace/app.jar app.jar
+
+USER ${APP_USER}
+
+# Expose ports (runtime port configured via environment)
+EXPOSE 8080 5005
+
+# Health check
+HEALTHCHECK --interval=15s --timeout=3s --start-period=40s --retries=3 \
+    CMD curl -fsS --max-time 2 http://localhost:${SERVER_PORT:-8080}/actuator/health/readiness || exit 1
+
+# JVM configuration
+ENV JAVA_OPTS="-XX:MaxRAMPercentage=80.0 \
+    -XX:+UseG1GC \
+    -XX:+UseStringDeduplication \
+    -XX:+UseContainerSupport \
+    -Djava.security.egd=file:/dev/./urandom \
+    -Djava.awt.headless=true \
+    -Dfile.encoding=UTF-8 \
+    -Duser.timezone=UTC \
+    -Dmanagement.endpoints.web.exposure.include=health,info,metrics,prometheus"
+
+# Spring Boot configuration
+ENV SPRING_OUTPUT_ANSI_ENABLED=ALWAYS
+ENV LOGGING_LEVEL_ROOT=INFO
+ENV SERVER_PORT=8080
+
+# Startup command with debug support
+ENTRYPOINT ["sh", "-c", "\
+    if [ \"${DEBUG:-false}\" = \"true\" ]; then \
+        echo 'Starting ${SERVICE_NAME} in DEBUG mode on port 5005...'; \
+        exec java $JAVA_OPTS -agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=*:5005 -jar app.jar; \
+    else \
+        exec java $JAVA_OPTS -jar app.jar; \
+    fi"]