Merge pull request #5 from worryboy/feature/containerize-schlundtech

Feature/containerize schlundtech

Author: worryboy

.github/release.yml

@@ -0,0 +1,14 @@
+changelog:
+  categories:
+    - title: Features
+      labels:
+        - feature
+    - title: Fixes
+      labels:
+        - fix
+    - title: Documentation
+      labels:
+        - documentation
+  exclude:
+    labels:
+      - skip-changelog

.github/workflows/docker-release.yml

@@ -0,0 +1,75 @@
+name: Docker Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: Git tag to release, for example v0.2.0
+        required: true
+        type: string
+
+permissions:
+  contents: write
+
+jobs:
+  release:
+    name: Build, Publish, and Release
+    runs-on: ubuntu-latest
+    environment: dockerhub
+
+    steps:
+      - name: Determine release tag
+        id: version
+        run: |
+          if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
+            TAG="${{ inputs.tag }}"
+          else
+            TAG="${{ github.ref_name }}"
+          fi
+
+          case "$TAG" in
+            v*)
+              VERSION="${TAG#v}"
+              ;;
+            *)
+              echo "Tag must start with v, got: $TAG" >&2
+              exit 1
+              ;;
+          esac
+
+          echo "tag=$TAG" >> "$GITHUB_OUTPUT"
+          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+
+      - name: Check out repository
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ steps.version.outputs.tag }}
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: true
+          build-args: |
+            APP_VERSION=${{ steps.version.outputs.version }}
+          tags: |
+            worryboy/internetx-dyndns:${{ steps.version.outputs.version }}
+            worryboy/internetx-dyndns:latest
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ steps.version.outputs.tag }}
+          generate_release_notes: true

README.Docker.md

@@ -151,18 +151,4 @@ If an enabled address family cannot be detected, the worker logs a warning and c
 - The image removes build-only packages after compiling PHP extensions and keeps only the required runtime libraries.
 - Some vulnerability scanner findings may still be inherited from the upstream official `php:8.3-cli-alpine3.22` base image and Alpine runtime packages. Those are usually resolved by rebuilding on newer upstream base releases when fixes land there.
 
-## Release Notes
 
-### 0.1.0
-
-Initial release:
-
-- container-only InterNetX DynDNS worker
-- session-based InterNetX XML authentication
-- explicit session cleanup
-- safe dry-run mode
-- configurable IPv4/IPv6 public IP detection
-- single `TARGET_HOST` update model
-- `A` record updates for IPv4
-- `AAAA` record updates for IPv6
-- outbound-only runtime with no exposed ports