Merge pull request #46 from ArielMAJ/release/1.0.0

Release/1.0.0

Author: ArielMAJ

.env.example

@@ -5,4 +5,8 @@ POSTGRES_DATABASE=finances
 POSTGRES_PORT=5432
 POSTGRES_CREATE_DROP=update
 
-SECRET_KEY=
+CORS_ALLOWED_ORIGINS=http://localhost:4200
+SWAGGER_ENABLED=false
+
+JWT_EXPIRATION_TIME=3600000
+SECRET_KEY=

Dockerfile

@@ -1,12 +1,22 @@
-FROM maven:3.9.9-ibm-semeru-21-jammy
+# --- Build stage ---
+FROM maven:3.9.15-amazoncorretto-21-alpine AS builder
 
-WORKDIR /
-
-COPY .mvn/ .mvn
-COPY mvnw pom.xml ./
-RUN ./mvnw dependency:go-offline
+WORKDIR /build
 
+COPY pom.xml ./
 COPY src ./src
+RUN mvn package -DskipTests -B
+
+# --- Runtime stage ---
+FROM eclipse-temurin:21-jre-alpine
+
+RUN addgroup -S appgroup && adduser -S appuser -G appgroup
+
+WORKDIR /app
+
+COPY --from=builder /build/target/*.jar app.jar
+
+USER appuser
 
 EXPOSE 8080
-CMD ["./mvnw", "spring-boot:run"]
+ENTRYPOINT ["java", "-jar", "app.jar"]

Makefile

@@ -17,7 +17,7 @@ recreate: down ## Rebuild and recreate all containers.
 
 .PHONY: run
 run: ## Run the project locally.
-	./mvnw spring-boot:run
+	mvn spring-boot:run
 
 .PHONY: install
 install: ## Install dependencies
@@ -39,6 +39,17 @@ up-test-database: ## Start test database container.
 generate-secret-key:
 	@node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
 
+.PHONY: setup-env
+setup-env: ## Create .env from .env.example and generate a SECRET_KEY.
+	@if [ -f .env ]; then \
+		echo ".env already exists. Remove it first if you want to regenerate."; \
+		exit 1; \
+	fi
+	@cp .env.example .env
+	@SECRET=$$(node -e "process.stdout.write(require('crypto').randomBytes(32).toString('hex'))"); \
+	perl -i -pe "s/^SECRET_KEY=.*/SECRET_KEY=$$SECRET/" .env
+	@echo ".env created with a generated SECRET_KEY."
+
 .DEFAULT_GOAL := help
 help:
 	@grep -E '^[a-zA-Z_-]+:.*?## .*$$' $(MAKEFILE_LIST) | sed 's/Makefile://g' | awk 'BEGIN {FS = ":.*?## "}; {printf "\033[36m%-30s\033[0m %s\n", $$1, $$2}'

docker-compose.yaml

@@ -11,6 +11,9 @@ services:
       POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
       POSTGRES_CREATE_DROP: ${POSTGRES_CREATE_DROP}
       SECRET_KEY: ${SECRET_KEY}
+      JWT_EXPIRATION_TIME: ${JWT_EXPIRATION_TIME}
+      CORS_ALLOWED_ORIGINS: ${CORS_ALLOWED_ORIGINS}
+      SWAGGER_ENABLED: ${SWAGGER_ENABLED}
     ports:
       - "8080:8080"
     depends_on: