chore: docker setup

Author: 404Simon

.dockerignore

@@ -0,0 +1,62 @@
+# Git files
+.git/
+.gitignore
+.github/
+
+# Documentation
+*.md
+LICENSE
+docs/
+
+# Development files
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+
+# Build artifacts (we'll build fresh in Docker)
+target/
+dist/
+build/
+
+# Database files
+*.db
+*.db-shm
+*.db-wal
+flashy.db*
+
+# Environment files
+.env
+.env.*
+
+# Node modules (will be installed in Docker)
+node_modules/
+
+# SQLx offline data (generated during Docker build)
+.sqlx/
+
+# Test files
+tests/
+end2end/
+*.test.js
+
+# CI/CD artifacts
+artifacts/
+
+# OS files
+.DS_Store
+Thumbs.db
+
+# Logs
+*.log
+logs/
+
+# Temporary files
+tmp/
+temp/
+*.tmp
+
+# Other project directories
+rustify-app/
+genanki-rs/

Dockerfile

@@ -0,0 +1,113 @@
+# =============================================================================
+# Stage 1: Tool Cache - Build/install cargo tools once and cache them
+# =============================================================================
+FROM rustlang/rust:nightly-alpine AS tool-cache
+
+RUN apk add --no-cache libc-dev openssl-dev sqlite-dev perl make
+
+# Install cargo tools in a dedicated stage for better caching
+RUN cargo install sqlx-cli --no-default-features --features sqlite --locked
+RUN cargo install cargo-leptos --locked
+
+# =============================================================================
+# Stage 2: Builder - Build the Leptos SSR application
+# =============================================================================
+FROM rustlang/rust:nightly-alpine AS builder
+
+# Install build dependencies
+RUN apk update && \
+  apk add --no-cache \
+  bash \
+  curl \
+  npm \
+  libc-dev \
+  binaryen \
+  openssl-dev \
+  openssl-libs-static \
+  pkgconfig \
+  sqlite \
+  sqlite-dev \
+  musl-dev
+
+# Copy pre-built tools from cache stage
+COPY --from=tool-cache /usr/local/cargo/bin/sqlx /usr/local/cargo/bin/sqlx
+COPY --from=tool-cache /usr/local/cargo/bin/cargo-sqlx /usr/local/cargo/bin/cargo-sqlx
+COPY --from=tool-cache /usr/local/cargo/bin/cargo-leptos /usr/local/cargo/bin/cargo-leptos
+
+# Add WASM target for client-side hydration
+RUN rustup target add wasm32-unknown-unknown
+
+# Set working directory
+WORKDIR /work
+
+# Copy dependency manifests first and create dummy src for dependency caching
+COPY Cargo.toml Cargo.lock ./
+RUN mkdir -p src && \
+  echo "fn main() {}" > src/main.rs && \
+  echo "pub fn dummy() {}" > src/lib.rs
+RUN cargo build --release --features ssr && rm -rf src target/release/deps/flashy*
+
+# Now copy real source code
+COPY src ./src
+COPY style ./style
+COPY public ./public
+COPY migrations ./migrations
+
+ENV DATABASE_URL=sqlite:build.db
+RUN sqlx database create && \
+  sqlx migrate run && \
+  cargo sqlx prepare --workspace -- --lib --features ssr && \
+  rm build.db*
+
+# Set SQLx to offline mode for the actual build
+ENV SQLX_OFFLINE=true
+
+# Build the application in release mode with optimizations
+ENV CARGO_PROFILE_RELEASE_STRIP=symbols
+ENV CARGO_PROFILE_RELEASE_LTO=true
+ENV CARGO_PROFILE_RELEASE_CODEGEN_UNITS=1
+RUN cargo leptos build --release -vv
+
+# =============================================================================
+# Stage 3: Runtime Dependencies - Build minimal sqlx for runtime
+# =============================================================================
+FROM rustlang/rust:nightly-alpine AS runtime-tools
+
+RUN apk add --no-cache libc-dev openssl-dev sqlite-dev musl-dev
+
+# Build sqlx statically for distroless
+RUN cargo install sqlx-cli --no-default-features --features sqlite --locked \
+  --target x86_64-unknown-linux-musl || \
+  cargo install sqlx-cli --no-default-features --features sqlite --locked
+
+# =============================================================================
+# Stage 4: Runner - Distroless minimal runtime image
+# =============================================================================
+# :debug needed for busybox shell for entrypoint script
+FROM gcr.io/distroless/cc-debian12:debug
+
+WORKDIR /app
+
+COPY --from=builder --chmod=755 /work/target/release/flashy /app/flashy
+COPY --from=builder --chmod=644 /work/Cargo.toml /app/Cargo.toml
+
+COPY --from=builder /work/target/site /app/site
+COPY --from=builder /work/migrations /app/migrations
+
+COPY --from=runtime-tools --chmod=755 /usr/local/cargo/bin/sqlx /app/sqlx
+
+COPY --chmod=755 docker-entrypoint.sh /app/docker-entrypoint.sh
+
+ENV RUST_LOG="info"
+ENV LEPTOS_SITE_ADDR="0.0.0.0:8080"
+ENV LEPTOS_SITE_ROOT="/app/site"
+ENV DATABASE_URL="sqlite:/app/data/flashy.db"
+
+EXPOSE 8080
+
+VOLUME ["/app/data"]
+
+HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
+  CMD ["/busybox/wget", "-q", "-O", "/dev/null", "http://localhost:8080/"]
+
+ENTRYPOINT ["/busybox/sh", "/app/docker-entrypoint.sh"]

docker-compose-dev.yml

@@ -0,0 +1,15 @@
+services:
+  minio:
+    image: minio/minio:latest
+    command: server /data --console-address ":9001"
+    ports:
+      - "9000:9000"
+      - "9001:9001"
+    environment:
+      MINIO_ROOT_USER: ${MINIO_ROOT_USER:-minioadmin}
+      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD:-minioadmin}
+    volumes:
+      - minio_data:/data
+
+volumes:
+  minio_data:

docker-compose.yml

@@ -1,4 +1,37 @@
 services:
+  flashy:
+    container_name: flashy
+    image: ghcr.io/404simon/flashy:latest
+    # Run as host user to avoid permission issues with bind-mounted volumes
+    # Set UID/GID in .env file or they default to 1000:1000
+    user: "${UID:-1000}:${GID:-1000}"
+    ports:
+      - "8080:8080"
+    volumes:
+      - ./data:/app/data
+    environment:
+      - DATABASE_URL=sqlite:/app/data/flashy.db
+      - RUST_LOG=info
+      - LEPTOS_SITE_ADDR=0.0.0.0:8080
+      - LEPTOS_SITE_ROOT=/app/site
+    restart: unless-stopped
+    # Security hardening
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL
+    read_only: true
+    tmpfs:
+      - /tmp
+    healthcheck:
+      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:8080/"]
+      interval: 30s
+      timeout: 3s
+      start_period: 5s
+      retries: 3
+    depends_on:
+      - minio
+
   minio:
     image: minio/minio:latest
     command: server /data --console-address ":9001"
@@ -10,6 +43,7 @@ services:
       MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD:-minioadmin}
     volumes:
       - minio_data:/data
+    restart: unless-stopped
 
 volumes:
   minio_data:

docker-entrypoint.sh

@@ -0,0 +1,47 @@
+#!/busybox/sh
+set -e
+
+DB_URL="${DATABASE_URL:-sqlite:/app/data/flashy.db}"
+DB_PATH=$(echo "$DB_URL" | sed 's|^sqlite:||')
+DB_DIR=$(dirname "$DB_PATH")
+
+if ! mkdir -p "$DB_DIR" 2>/dev/null; then
+    echo "ERROR: Cannot create data directory: $DB_DIR"
+    echo "Please ensure the volume is mounted with proper permissions"
+    exit 1
+fi
+
+if [ -f "$DB_PATH" ]; then
+    echo "Database file found - will run migrations to ensure schema is up-to-date"
+    DB_EXISTS=true
+else
+    echo "Database file not found - will create new database and run initial migrations"
+    DB_EXISTS=false
+fi
+
+echo "========================================="
+echo "Running database setup..."
+echo "========================================="
+
+cd /app
+
+if [ "$DB_EXISTS" = false ]; then
+    echo "Creating new database..."
+    /app/sqlx database create
+    echo "Database created successfully"
+    
+    echo "Running initial migrations..."
+    /app/sqlx migrate run
+    echo "Initial migrations completed"
+else
+    echo "Database already exists, checking for new migrations..."
+    /app/sqlx migrate run
+    echo "Migrations up to date"
+fi
+
+echo "========================================="
+echo "Starting Flashy application..."
+echo "========================================="
+
+# Execute the application (replaces this shell process)
+exec /app/flashy