Switch to distroless Dockerfile

Author: nicolaschan

.env

@@ -0,0 +1,2 @@
+BAYBRIDGE_DIST_PATH=dist
+BAYBRIDGE_CHARTJS_DIST_PATH=node_modules/chart.js/dist

.envrc

@@ -1 +1,2 @@
 use flake
+dotenv

.github/workflows/docker.yml

@@ -6,26 +6,34 @@ on:
   pull_request:
     branches: [ "master" ]
 
-jobs:
+env:
+  CONTAINER: baybridge
 
-  docker-baybridge:
+jobs:
+  docker-nix:
     runs-on: ubuntu-latest
     permissions:
       contents: read
       packages: write
     steps:
     - uses: actions/checkout@v4
+    - uses: cachix/install-nix-action@v31
+      with:
+        github_access_token: ${{ secrets.GITHUB_TOKEN }}
+    - name: Build image
+      run: |
+        nix build .#docker
+        docker load < result
     - name: Log in to GitHub Container Registry
       uses: docker/login-action@v2
       with:
         registry: ghcr.io
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
-    - uses: extractions/setup-just@v2
-    - name: Build css
-      run: just build-css
-    - name: Build & push docker image
+    - name: Tag & push docker image
       run: |
-        docker build . --push --file Dockerfile \
-        --tag ghcr.io/nicolaschan/baybridge:${GITHUB_REF#refs/*/}-${{ github.run_id }} \
-        --tag ghcr.io/nicolaschan/baybridge:latest
+        docker tag $CONTAINER:latest ghcr.io/nicolaschan/$CONTAINER:latest
+        docker push ghcr.io/nicolaschan/$CONTAINER:latest
+        docker tag $CONTAINER:latest ghcr.io/nicolaschan/$CONTAINER:${GITHUB_REF#refs/*/}-${{ github.run_id }}
+        docker push ghcr.io/nicolaschan/$CONTAINER:${GITHUB_REF#refs/*/}-${{ github.run_id }}
+