Init deployment

Author: sivayogasubramanian

.github/.keep

@@ -0,0 +1,11 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/frontend"
+    schedule:
+      interval: "daily"

.github/dependabot.yml

@@ -0,0 +1,20 @@
+name: Build and Lint frontend
+
+on:
+  push:
+    branches:
+      - master
+  pull_request:
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-node@v2
+      - run: yarn install
+        working-directory: frontend
+      - run: yarn build
+        working-directory: frontend
+      - run: yarn lint
+        working-directory: frontend

.github/workflows/build-and-lint-frontend.yml

@@ -0,0 +1,56 @@
+name: Build Docker Images
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - master
+
+env:
+  FRONTEND_IMAGE_NAME: peerprep-frontend
+  NGINX_IMAGE_NAME: peerprep-nginx
+
+jobs:
+  build-frontend-image:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - name: Check out Source
+        uses: actions/checkout@v2
+      - name: Log in to the Container Registry
+        uses: docker/login-action@v1
+        with:
+          registry: ghcr.io
+          username: ay2324s1-course-assessment-g21
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Build and Push Docker Image
+        uses: docker/build-push-action@v2
+        with:
+          context: .
+          file: deployment/Dockerfile-frontend
+          push: true
+          tags: ghcr.io/ay2324s1-course-assessment-g21/${{ env.FRONTEND_IMAGE_NAME }}:latest
+
+  build-nginx-image:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - name: Check out Source
+        uses: actions/checkout@v2
+      - name: Log in to the Container Registry
+        uses: docker/login-action@v1
+        with:
+          registry: ghcr.io
+          username: ay2324s1-course-assessment-g21
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Build and Push Docker Image
+        uses: docker/build-push-action@v2
+        with:
+          context: .
+          file: deployment/Dockerfile-nginx
+          push: true
+          tags: ghcr.io/ay2324s1-course-assessment-g21/${{ env.NGINX_IMAGE_NAME }}:latest

.github/workflows/build-docker-images.yml

@@ -0,0 +1,25 @@
+# To build a Docker image from this file, run from the root directory:
+# docker build -f deployment/Dockerfile-frontend -t giving-coupons-frontend .
+
+# Intermediate image for building the Next app
+FROM node:16.13.0
+
+# Environment variables
+ENV APP_ROOT /frontend
+
+# Copy source code into container
+RUN mkdir --parents $APP_ROOT
+WORKDIR $APP_ROOT
+COPY frontend .
+
+# Install dependencies
+RUN yarn install --frozen-lockfile
+
+# Build app
+RUN yarn build
+
+# Expose port
+EXPOSE 3000
+
+# Final image for running the Next app
+CMD ["yarn", "start"]

deployment/Dockerfile-frontend

@@ -0,0 +1,17 @@
+# Use nginx to serve the app
+FROM nginx:stable
+
+# Delete NGINX defaults
+RUN rm -f /etc/nginx/conf.d/* /etc/nginx/sites-enabled/*
+
+# Copy NGINX config
+COPY deployment/nginx/nginx.conf /etc/nginx
+COPY deployment/nginx/sites-enabled/* /etc/nginx/sites-enabled/
+
+# Expose ports
+EXPOSE 80
+EXPOSE 443
+
+# Add a script containing the main command to be executed
+COPY deployment/scripts/cmd-frontend.sh /usr/bin/
+CMD ["cmd-nginx.sh"]

deployment/Dockerfile-nginx

@@ -0,0 +1,48 @@
+version: "3.8"
+
+services:
+  frontend:
+    image: ghcr.io/ay2324s1-course-assessment-g21/peerprep-frontend:latest
+    container_name: peerprep-frontend
+    restart: always
+    depends_on:
+      - backend
+    networks:
+      - peerprep-network
+    logging:
+      driver: journald
+    expose:
+      - "3000"
+
+  nginx:
+    image: ghcr.io/ay2324s1-course-assessment-g21/peerprep-nginx:latest
+    container_name: peerprep-nginx
+    restart: always
+    volumes:
+      - /etc/letsencrypt:/etc/letsencrypt
+      - /var/www/certbot:/var/www/certbot
+    depends_on:
+      - frontend
+    networks:
+      - peerprep-network
+    logging:
+      driver: journald
+    ports:
+      - "80:80"
+      - "443:443"
+
+  certbot:
+    image: certbot/certbot
+    container_name: peerprep-certbot
+    restart: always
+    volumes:
+      - /etc/letsencrypt:/etc/letsencrypt
+      - /var/www/certbot:/var/www/certbot
+    depends_on:
+      - nginx
+    networks:
+      - peerprep-network
+    entrypoint: "/bin/sh -c 'trap exit TERM; while :; do certbot renew; sleep 12h & wait $${!}; done;'"
+
+networks:
+  peerprep-network:

deployment/docker-compose.yml

@@ -0,0 +1,57 @@
+user nginx;
+worker_processes auto;
+error_log /var/log/nginx/error.log warn;
+pid /var/run/nginx.pid;
+
+events {
+  worker_connections 1024;
+}
+
+http {
+  include /etc/nginx/mime.types;
+  default_type application/octet-stream;
+
+  log_format main '$remote_addr - $remote_user [$time_local] "$request" '
+                  '$status $body_bytes_sent "$http_referer" '
+                  '"$http_user_agent" "$http_x_forwarded_for"';
+
+  access_log /var/log/nginx/access.log main;
+
+  sendfile on;
+  tcp_nopush on;
+  tcp_nodelay on;
+  keepalive_timeout 65;
+  types_hash_max_size 2048;
+
+  gzip on;
+  gzip_disable "msie6";
+  gzip_vary on;
+  gzip_proxied any;
+  gzip_comp_level 6;
+  gzip_buffers 16 8k;
+  gzip_http_version 1.1;
+  gzip_min_length 256;
+  gzip_types
+    application/atom+xml
+    application/geo+json
+    application/javascript
+    application/x-javascript
+    application/json
+    application/ld+json
+    application/manifest+json
+    application/rdf+xml
+    application/rss+xml
+    application/xhtml+xml
+    application/xml
+    font/eot
+    font/otf
+    font/ttf
+    image/svg+xml
+    text/css
+    text/javascript
+    text/plain
+    text/xml;
+
+  include /etc/nginx/conf.d/*.conf;
+  include /etc/nginx/sites-enabled/*;
+}

deployment/nginx/nginx.conf

@@ -0,0 +1,10 @@
+#!/bin/sh
+
+while :; do
+# Run the following commands every 6 hours
+sleep 6h & wait ${!};
+# Reload NGINX so that it serves the latest certificates
+nginx -s reload;
+done &
+# Run NGINX in foreground so that Docker can track it properly
+nginx -g "daemon off;"

deployment/scripts/cmd-nginx.sh

@@ -0,0 +1,9 @@
+*.md
+*.lock
+*.log
+*.scss
+*.css
+public/**
+.next/
+out/
+*.ico