Docker Hub Image

.github/workflows/docker-hub.yml

@@ -0,0 +1,24 @@
+name: Docker Image CI
+
+on:
+  release:
+    types: [created]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    env:
+      DOCKER_USER: ${{ secrets.DOCKER_USER }}
+      DOCKER_TOKEN: ${{ secrets.DOCKER_TOKEN }}
+    steps:
+    - uses: actions/checkout@v2
+    - name: Build and publish Docker image
+      run: |
+        export VERSION=$(echo $GITHUB_REF | sed -re 's/^.*\/([0-9a-zA-Z._-]+)$/\1/')
+        test "$VERSION" != "$GITHUB_REF"
+        docker build --file docker/Dockerfile --tag $DOCKER_USER/armadietto:$VERSION .
+        docker run --rm  -v /var/run/docker.sock:/var/run/docker.sock -v cache:/root/.cache/ aquasec/trivy $DOCKER_USER/armadietto:$VERSION
+        docker login -u $DOCKER_USER -p $DOCKER_TOKEN
+        docker push $DOCKER_USER/armadietto:$VERSION
+        docker tag $DOCKER_USER/armadietto:$VERSION $DOCKER_USER/armadietto
+        docker push $DOCKER_USER/armadietto

docker/Dockerfile

@@ -0,0 +1,54 @@
+FROM alpine:latest as build
+
+ARG PKG_MANAGER="yarn"
+ARG INSTALL_COMMAND="yarn install --pure-lockfile --production"
+
+RUN mkdir /opt/armadietto
+WORKDIR /opt/armadietto
+
+RUN apk add nodejs $PKG_MANAGER
+
+COPY package.json ./
+COPY package-lock.json ./
+COPY yarn.lock ./
+
+RUN $INSTALL_COMMAND
+
+FROM alpine:latest
+
+LABEL description="Armadietto NodeJS web service (a RemoteStorageJS backend)"
+
+ARG CONFIG_PATH_STORAGE="/usr/share/armadietto"
+ARG PROJECT_NAME="armadietto"
+ARG PORT="8000"
+ARG USER="armadietto"
+
+ENV NODE_ENV=production
+ENV PROJECT_NAME=$PROJECT_NAME
+ENV PORT=$PORT
+
+RUN mkdir /opt/armadietto
+WORKDIR /opt/armadietto
+
+RUN apk add nodejs
+RUN mkdir -m 0700 $CONFIG_PATH_STORAGE
+RUN adduser -u 6582 -HD $PROJECT_NAME
+RUN chown $PROJECT_NAME $CONFIG_PATH_STORAGE
+
+COPY --from=build /opt/armadietto/node_modules/ node_modules/
+COPY package.json ./
+COPY README.md ./
+COPY lib/ lib/
+COPY bin/ bin/
+
+RUN ln -s /opt/armadietto/bin/armadietto.js /usr/local/bin/armadietto
+
+COPY docker/config.json /etc/armadietto.conf.json
+
+VOLUME $CONFIG_PATH_STORAGE
+EXPOSE $PORT
+USER $PROJECT_NAME
+
+CMD $PROJECT_NAME -c /etc/armadietto.conf.json
+
+HEALTHCHECK --start-period=10s CMD wget -q -O /dev/null http://127.0.0.1:$PORT/

docker/config.json

@@ -0,0 +1,18 @@
+{
+  "allow_signup": true,
+  "storage_path": "/usr/share/armadietto",
+  "cache_views": true,
+  "http": {
+    "host": "0.0.0.0",
+    "port": 8000
+  },
+  "https": {
+    "enable": false,
+    "force": false,
+    "port": 4443,
+    "cert": "/etc/letsencrypt/live/example.com/cert.pem",
+    "key": "/etc/letsencrypt/live/example.com/privkey.pem"
+  },
+  "basePath": ""
+}
+