Last active
May 4, 2023 15:23
-
-
Save mateuszbialowas/059c916cde434b809ff7514405194fc8 to your computer and use it in GitHub Desktop.
Dockerfile, esbuild, tailwind
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# PostgreSQL. Versions 9.3 and up are supported. | |
# | |
# Install the pg driver: | |
# gem install pg | |
# On macOS with Homebrew: | |
# gem install pg -- --with-pg-config=/usr/local/bin/pg_config | |
# On macOS with MacPorts: | |
# gem install pg -- --with-pg-config=/opt/local/lib/postgresql84/bin/pg_config | |
# On Windows: | |
# gem install pg | |
# Choose the win32 build. | |
# Install PostgreSQL and put its /bin directory on your path. | |
# | |
# Configure Using Gemfile | |
# gem "pg" | |
# | |
default: &default | |
adapter: postgresql | |
encoding: unicode | |
# For details on connection pooling, see Rails configuration guide | |
# https://guides.rubyonrails.org/configuring.html#database-pooling | |
pool: <%= ENV.fetch("RAILS_MAX_THREADS") { 5 } %> | |
development: | |
<<: *default | |
database: ogloradar_development | |
# The specified database role being used to connect to postgres. | |
# To create additional roles in postgres see `$ createuser --help`. | |
# When left blank, postgres will use the default role. This is | |
# the same name as the operating system user running Rails. | |
#username: ogloradar | |
# The password associated with the postgres role (username). | |
#password: | |
# Connect on a TCP socket. Omitted by default since the client uses a | |
# domain socket that doesn't need configuration. Windows does not have | |
# domain sockets, so uncomment these lines. | |
#host: localhost | |
# The TCP port the server listens on. Defaults to 5432. | |
# If your server runs on a different port number, change accordingly. | |
#port: 5432 | |
# Schema search path. The server defaults to $user,public | |
#schema_search_path: myapp,sharedapp,public | |
# Minimum log levels, in increasing order: | |
# debug5, debug4, debug3, debug2, debug1, | |
# log, notice, warning, error, fatal, and panic | |
# Defaults to warning. | |
#min_messages: notice | |
# Warning: The database defined as "test" will be erased and | |
# re-generated from your development database when you run "rake". | |
# Do not set this db to the same as development or production. | |
test: | |
<<: *default | |
database: ogloradar_test | |
# As with config/credentials.yml, you never want to store sensitive information, | |
# like your database password, in your source code. If your source code is | |
# ever seen by anyone, they now have access to your database. | |
# | |
# Instead, provide the password or a full connection URL as an environment | |
# variable when you boot the app. For example: | |
# | |
# DATABASE_URL="postgres://myuser:mypass@localhost/somedatabase" | |
# | |
# If the connection URL is provided in the special DATABASE_URL environment | |
# variable, Rails will automatically merge its configuration values on top of | |
# the values provided in this file. Alternatively, you can specify a connection | |
# URL environment variable explicitly: | |
# | |
# production: | |
# url: <%= ENV["MY_APP_DATABASE_URL"] %> | |
# | |
# Read https://guides.rubyonrails.org/configuring.html#configuring-a-database | |
# for a full overview on how database connection configuration can be specified. | |
# | |
production: | |
<<: *default | |
database_url: <%= ENV["DATABASE_URL"] %> |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Name of your application. Used to uniquely configure containers. | |
service: ogloradar | |
# Name of the container image. | |
image: mateuszbialowas/ogloradar | |
# Deploy to these servers. | |
servers: | |
- 64.226.86.207 | |
# Credentials for your image host. | |
registry: | |
username: mateuszbialowas | |
password: | |
- MRSK_REGISTRY_PASSWORD | |
# Inject ENV variables into containers (secrets come from .env). | |
env: | |
secret: | |
- RAILS_MASTER_KEY | |
- DATABASE_URL | |
# Call a broadcast command on deploys. | |
# audit_broadcast_cmd: | |
# bin/broadcast_to_bc | |
# Use a different ssh user than root | |
# ssh: | |
# user: app | |
# Configure builder setup. | |
# builder: | |
# args: | |
# RUBY_VERSION: 3.2.0 | |
# secrets: | |
# - GITHUB_TOKEN | |
# remote: | |
# arch: amd64 | |
# host: ssh://[email protected] | |
#Use accessory services (secrets come from .env). | |
accessories: | |
postgres: | |
image: postgres:latest | |
host: 64.226.86.207 | |
port: 5432 | |
env: | |
secret: | |
- DATABASE_URL | |
volumes: | |
- /var/lib/postgres:/var/lib/postgres | |
redis: | |
image: redis:latest | |
role: | |
- web | |
hosts: | |
- 202.61.197.241 | |
port: "36379:6379" | |
volumes: | |
- /var/lib/redis:/data | |
# Configure custom arguments for Traefik | |
# traefik: | |
# args: | |
# accesslog: true | |
# accesslog.format: json | |
# Configure a custom healthcheck (default is /up on port 3000) | |
# healthcheck: | |
# path: /healthz | |
# port: 4000 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# /bin/docker-entrypoint | |
#!/bin/bash -e | |
# If running the rails server then create or migrate existing database | |
if [ "${*}" == "./bin/rails server" ]; then | |
./bin/rails db:prepare | |
fi | |
exec "${@}" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# syntax = docker/dockerfile:1 | |
# Make sure RUBY_VERSION matches the Ruby version in .ruby-version and Gemfile | |
ARG RUBY_VERSION=3.2.1 | |
FROM registry.docker.com/library/ruby:$RUBY_VERSION-slim as base | |
# Rails app lives here | |
WORKDIR /rails | |
# Set production environment | |
ENV RAILS_ENV="production" \ | |
BUNDLE_DEPLOYMENT="1" \ | |
BUNDLE_PATH="/usr/local/bundle" \ | |
BUNDLE_WITHOUT="development" | |
# Throw-away build stage to reduce size of final image | |
FROM base as build | |
# Install packages needed to build gems and node modules | |
RUN apt-get update -qq && \ | |
apt-get install --no-install-recommends -y build-essential curl git libpq-dev libvips node-gyp pkg-config python-is-python3 | |
# Install JavaScript dependencies | |
ARG NODE_VERSION=19.7.0 | |
ARG YARN_VERSION=1.22.19 | |
ENV PATH=/usr/local/node/bin:$PATH | |
RUN curl -sL https://github.com/nodenv/node-build/archive/master.tar.gz | tar xz -C /tmp/ && \ | |
/tmp/node-build-master/bin/node-build "${NODE_VERSION}" /usr/local/node && \ | |
npm install -g yarn@$YARN_VERSION && \ | |
rm -rf /tmp/node-build-master | |
# Install application gems | |
COPY Gemfile Gemfile.lock ./ | |
RUN bundle install && \ | |
rm -rf ~/.bundle/ "${BUNDLE_PATH}"/ruby/*/cache "${BUNDLE_PATH}"/ruby/*/bundler/gems/*/.git && \ | |
bundle exec bootsnap precompile --gemfile | |
# Install node modules | |
COPY package.json yarn.lock ./ | |
RUN yarn install --frozen-lockfile | |
# Copy application code | |
COPY . . | |
# Precompile bootsnap code for faster boot times | |
RUN bundle exec bootsnap precompile app/ lib/ | |
# Precompiling assets for production without requiring secret RAILS_MASTER_KEY | |
RUN SECRET_KEY_BASE_DUMMY=1 ./bin/rails assets:precompile | |
# Final stage for app image | |
FROM base | |
# Install packages needed for deployment | |
RUN apt-get update -qq && \ | |
apt-get install --no-install-recommends -y libvips postgresql-client && \ | |
rm -rf /var/lib/apt/lists /var/cache/apt/archives | |
# Copy built artifacts: gems, application | |
COPY --from=build /usr/local/bundle /usr/local/bundle | |
COPY --from=build /rails /rails | |
# Run and own only the runtime files as a non-root user for security | |
RUN useradd rails --home /rails --shell /bin/bash && \ | |
chown -R rails:rails db log storage tmp | |
USER rails:rails | |
# Entrypoint prepares the database. | |
ENTRYPOINT ["/rails/bin/docker-entrypoint"] | |
# Start the server by default, this can be overwritten at runtime | |
EXPOSE 3000 | |
CMD ["./bin/rails", "server"] |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment