Implement DB and terminated deal tracking

Author: lukasz-wal

.gitignore

@@ -2,4 +2,7 @@ node_modules
 .env
 dist
 
+/prisma/generated/
+/prismaDmob/generated/
+
 src/**/*.js

Dockerfile

@@ -2,13 +2,30 @@ FROM node:24-alpine AS build
 WORKDIR /app
 COPY package*.json ./
 RUN npm ci
-COPY . .
+
+COPY --chown=1000:1000 . .
+
+RUN --mount=type=secret,id=DATABASE_URL,uid=1000 \
+    env DATABASE_URL=$(cat /run/secrets/DATABASE_URL) \
+    npx prisma generate --schema=./prisma/schema.prisma
+RUN --mount=type=secret,id=DMOB_DATABASE_URL,uid=1000 \
+    env DMOB_DATABASE_URL=$(cat /run/secrets/DMOB_DATABASE_URL) \
+    npx prisma generate --schema=./prismaDmob/schema.prisma
+
 RUN npm run build
 
 FROM node:24-alpine
 WORKDIR /app
 COPY package*.json ./
 RUN npm ci --omit=dev
 COPY --from=build /app/dist ./dist
+COPY --from=build --chown=node:node /app/prisma/ ./prisma/
+COPY --from=build --chown=node:node /app/prismaDmob/ ./prismaDmob/
+COPY ci/aws-secret-to-db-url.js ./
+COPY ci/runner.sh ./
+
+ADD --chown=node https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem /etc/ssl/certs/aws-global-bundle.pem
+ENTRYPOINT [ "/app/runner.sh" ]
+
 EXPOSE 3000
 CMD ["node", "dist/index.js"]

ci/aws-secret-to-db-url.js

@@ -0,0 +1,49 @@
+if (!process.env.DB_CONNECT_PARAMS_JSON) {
+  console.error("Missing DB_CONNECT_PARAMS_JSON env var!");
+  process.exit(1);
+}
+
+const {
+  engine,
+  username,
+  password: rawPassword,
+  host,
+  port,
+  dbname,
+} = JSON.parse(process.env.DB_CONNECT_PARAMS_JSON);
+
+if (!engine) {
+  console.error("Missing engine in DB_CONNECT_PARAMS_JSON!");
+  process.exit(1);
+}
+
+if (!username) {
+  console.error("Missing username in DB_CONNECT_PARAMS_JSON!");
+  process.exit(1);
+}
+
+if (!rawPassword) {
+  console.error("Missing password in DB_CONNECT_PARAMS_JSON!");
+  process.exit(1);
+}
+
+if (!host) {
+  console.error("Missing host in DB_CONNECT_PARAMS_JSON!");
+  process.exit(1);
+}
+
+if (!port) {
+  console.error("Missing port in DB_CONNECT_PARAMS_JSON!");
+  process.exit(1);
+}
+
+if (!dbname) {
+  console.error("Missing dbname in DB_CONNECT_PARAMS_JSON!");
+  process.exit(1);
+}
+
+const options = process.env.DB_OPTIONS ?? "";
+const password = encodeURIComponent(rawPassword);
+console.log(
+  `${engine}://${username}:${password}@${host}:${port}/${dbname}?${options}`,
+);

ci/runner.sh

@@ -0,0 +1,13 @@
+#!/bin/sh
+
+set -e
+
+cd "$(dirname "$0")"
+
+if [ -z "$DATABASE_URL" ]; then
+    export DATABASE_URL="$(node aws-secret-to-db-url.js)"
+fi
+
+if [ -n "$DATABASE_URL" ]; then
+    exec "$@"
+fi

docker-compose.yml

@@ -0,0 +1,23 @@
+version: "3.9"
+services:
+  oracle-service-db:
+    image: postgres:17
+    restart: unless-stopped
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+    environment:
+      - PGUSER=postgres
+      - POSTGRES_DB=postgres
+      - POSTGRES_USER=postgres
+      - POSTGRES_PASSWORD=postgres
+    ports:
+      - "8038:5432"
+    healthcheck:
+      test: "pg_isready"
+      interval: 30s
+      timeout: 5s
+      retries: 2
+
+volumes:
+  postgres_data:
+    driver: local