Release v1.0.0

services/base/Dockerfile

@@ -0,0 +1,84 @@
+ARG APP_USER_UID=1000
+ARG APP_USER_GID=1000
+
+FROM python:3.12.11-slim-bookworm AS base
+
+ARG APP_USER_UID
+ARG APP_USER_GID
+
+ENV PIP_DEFAULT_TIMEOUT=100 \
+    PIP_DISABLE_PIP_VERSION_CHECK=on \
+    PIP_INDEX_URL="https://nexus.bthlabs.pl/repository/pypi/simple/" \
+    PIP_NO_CACHE_DIR=off \
+    POETRY_HOME="/srv/poetry" \
+    POETRY_NO_INTERACTION=1 \
+    POETRY_VERSION=1.8.3 \
+    PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1 \
+    VIRTUAL_ENV="/srv/venv" \
+    YARN_MODULES_FOLDER="/srv/node_modules" \
+    YARN_REGISTRY="https://nexus.bthlabs.pl/repository/npm/"
+
+RUN if [ ! $(getent group ${APP_USER_GID}) ];then groupadd -g ${APP_USER_GID} app; fi && \
+    useradd -m -d /home/app -u ${APP_USER_UID} -g ${APP_USER_GID} app && \
+    apt-get update && \
+    apt-get install --no-install-recommends -y curl iputils-ping less net-tools vim-tiny wget && \
+    (curl -sSL https://install.python-poetry.org | python -) && \
+    python3.12 -m venv ${VIRTUAL_ENV} && \
+    mkdir /srv/app /srv/bin /srv/etc /srv/etc/entrypoint.d/ /srv/lib /srv/local /srv/log /srv/node_modules /srv/opt /srv/packages /srv/run /srv/tmp /srv/uploads
+
+COPY --chown=$APP_USER_UID:$APP_USER_GID base/ops/bin/*.sh /srv/bin/
+RUN chown -R ${APP_USER_UID}:${APP_USER_GID} /srv
+
+ENV PATH="${VIRTUAL_ENV}/bin:/srv/bin:/srv/poetry/bin:${PATH}"
+
+USER app
+WORKDIR /srv/app
+
+ENTRYPOINT ["/srv/bin/entrypoint.sh"]
+CMD ["echo", "NOOP"]
+
+FROM base AS build-python
+
+ARG APP_USER_UID
+ARG APP_USER_GID
+ARG IMAGE_ARCH
+
+USER root
+RUN MACHINE=$(uname -m) && \
+    case "${MACHINE}" in \
+        x86_64 | amd64)   IMAGE_ARCH="amd64" ;; \
+        aarch64 | arm64)  IMAGE_ARCH="arm64" ;; \
+        *) echo "Unsupported machime: ${MACHINE}" >&2; exit 1 ;; \
+    esac && \
+    apt-get update && \
+    apt-get install --no-install-recommends -y build-essential inotify-tools wait-for-it && \
+    (mkdir /srv/tmp/minify; cd /srv/tmp/minify; wget -O minify.tar.gz https://github.com/tdewolff/minify/releases/download/v2.23.11/minify_linux_${IMAGE_ARCH}.tar.gz; tar xvf minify.tar.gz; mv minify /srv/bin; cd /srv/app; rm -rf /srv/tmp/minify) && \
+    chown -R ${APP_USER_UID}:${APP_USER_GID} /srv
+
+USER app
+
+FROM build-python AS build-node
+
+ARG APP_USER_UID
+ARG APP_USER_GID
+ARG NODE_ARCH
+
+USER root
+RUN MACHINE=$(uname -m) && \
+    case "${MACHINE}" in \
+        x86_64 | amd64)   NODE_ARCH="x64" ;; \
+        aarch64 | arm64)  NODE_ARCH="arm64" ;; \
+        *) echo "Unsupported arch: $arch" >&2; exit 1 ;; \
+    esac && \
+    wget -O /srv/tmp/node.tar.xz https://nodejs.org/download/release/v22.14.0/node-v22.14.0-linux-${NODE_ARCH}.tar.xz && \
+    tar xvf /srv/tmp/node.tar.xz -C /srv/opt && \
+    rm -f /srv/tmp/node.tar.xz && \
+    mv /srv/opt/node-v22.14.0-linux-${NODE_ARCH} /srv/opt/node
+
+ENV PATH="/srv/opt/node/bin:${PATH}"
+
+RUN npm install -g yarn@1.22.22 && \
+    chown -R ${APP_USER_UID}:${APP_USER_GID} /srv
+
+USER app

services/base/ops/bin/check-virtualenv.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+
+${VIRTUAL_ENV}/bin/python -c "import this"

services/base/ops/bin/entrypoint.sh

@@ -0,0 +1,28 @@
+#!/bin/bash
+
+set -e
+
+export PYTHONPATH="/srv/app:$PYTHONPATH"
+
+SETUP_BACKEND=${SETUP_BACKEND:-"false"}
+SETUP_FRONTEND=${SETUP_FRONTEND:-"false"}
+
+/srv/bin/wait-for-cloud.sh
+
+if [ "${SETUP_BACKEND}" = "true" ];then
+    if [ "${RUN_POETRY_INSTALL}" = "true" ];then
+        poetry install --no-ansi --no-cache
+    else
+        /srv/bin/wait-for-virtualenv.sh
+    fi
+fi
+
+if [ "${SETUP_FRONTEND}" = "true" ];then
+    if [ "${RUN_YARN_INSTALL}" = "true" ];then
+        yarn --modules-folder /srv/node_modules/ install --frozen-lockfile
+    else
+        /srv/bin/wait-for-yarn-env.sh
+    fi
+fi
+
+exec "$@"

services/base/ops/bin/wait-for-cloud.sh

@@ -0,0 +1,18 @@
+#!/bin/bash
+
+if [ -x "$(command -v 'wait-for-it')" ];then
+    if [ ! -z "${POSTGRES_HOSTPORT}" ];then
+        echo "Waiting for postgres at ${POSTGRES_HOSTPORT}..."
+        wait-for-it -t 60 "${POSTGRES_HOSTPORT}" && echo "postgres is up"
+    fi
+
+    if [ ! -z "${RABBITMQ_HOSTPORT}" ];then
+        echo "Waiting for rabbitmq at ${RABBITMQ_HOSTPORT}..."
+        wait-for-it -t 60 "${RABBITMQ_HOSTPORT}" && echo "rabbitmq is up"
+    fi
+
+    if [ ! -z "${KEYCLOAK_HOSTPORT}" ];then
+        echo "Waiting for keycloak at ${KEYCLOAK_HOSTPORT}..."
+        wait-for-it -t 60 "${KEYCLOAK_HOSTPORT}" && echo "keycloak is up"
+    fi
+fi

services/base/ops/bin/wait-for-virtualenv.sh

@@ -0,0 +1,10 @@
+#!/bin/bash
+
+if [ ! -z "${VIRTUAL_ENV}" ];then
+    echo "Waiting for virtual env... "
+    /srv/bin/check-virtualenv.sh >/dev/null 2>&1
+    while [ $? -ne 0 ];do
+        /srv/bin/check-virtualenv.sh >/dev/null 2>&1
+    done
+    echo "virtual env is ready"
+fi

services/base/ops/bin/wait-for-yarn-env.sh

@@ -0,0 +1,10 @@
+#!/bin/bash
+
+if [ ! -z "${YARN_MODULES_FOLDER}" ];then
+    echo "Waiting for yarn env... "
+    yarn --modules-folder /srv/node_modules/ run eslint --help >/dev/null 2>&1
+    while [ $? -ne 0 ];do
+        yarn --modules-folder /srv/node_modules/ run eslint --help >/dev/null 2>&1
+    done
+    echo "yarn env is ready"
+fi