FEATURE (docker): Build project for sending to Docker hub

Author: RostislavDugin

.env.example

@@ -0,0 +1,39 @@
+name: Build & push Docker image
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch: {}
+
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Check out code
+        uses: actions/checkout@v4
+
+      - name: Set up QEMU (enables multi-arch emulation)
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Build and push
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          push: true
+          platforms: linux/amd64,linux/arm64 # both chip families
+          tags: |
+            rotislavdugin/postgresus:latest
+            rotislavdugin/postgresus:${{ github.sha }}
+          # If you want build-time args (TARGETOS etc.):
+          # build-args: |
+          #   TARGETOS=linux

.github/workflows/docker.yml

@@ -0,0 +1,100 @@
+# ========= BUILD FRONTEND =========
+FROM --platform=$BUILDPLATFORM node:24-alpine AS frontend-build
+
+WORKDIR /frontend
+
+COPY frontend/package.json frontend/package-lock.json ./
+RUN npm ci
+COPY frontend/ ./
+
+# Copy .env file (with fallback to .env.production.example)
+RUN if [ ! -f .env ]; then \
+      if [ -f .env.production.example ]; then \
+        cp .env.production.example .env; \
+      fi; \
+    fi
+
+RUN npm run build
+
+# ========= BUILD BACKEND =========
+FROM --platform=$BUILDPLATFORM golang:1.23.3 AS backend-build
+
+# Install Go public tools needed in runtime
+RUN curl -fsSL https://raw.githubusercontent.com/pressly/goose/master/install.sh | sh
+RUN go install github.com/swaggo/swag/cmd/swag@latest
+
+# Set working directory
+WORKDIR /app
+
+# Install Go dependencies
+COPY backend/go.mod backend/go.sum ./
+RUN go mod download
+
+# Create required directories for embedding
+RUN mkdir -p /app/ui/build
+
+# Copy frontend build output for embedding
+COPY --from=frontend-build /frontend/dist /app/ui/build
+
+# Generate Swagger documentation
+COPY backend/ ./
+RUN swag init -d . -g cmd/main.go -o swagger
+
+# Compile the backend
+ARG TARGETOS
+ARG TARGETARCH
+ARG TARGETVARIANT
+RUN CGO_ENABLED=0 \
+    GOOS=$TARGETOS \
+    GOARCH=$TARGETARCH \
+    go build -o /app/main ./cmd/main.go
+
+
+# ========= RUNTIME =========
+FROM --platform=$TARGETPLATFORM debian:bookworm-slim
+
+# Install PostgreSQL client tools (versions 13-17)
+RUN apt-get update && apt-get install -y --no-install-recommends \
+       wget ca-certificates gnupg lsb-release && \
+    wget -qO- https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add - && \
+    echo "deb http://apt.postgresql.org/pub/repos/apt $(lsb_release -cs)-pgdg main" \
+      > /etc/apt/sources.list.d/pgdg.list && \
+    apt-get update && \
+    apt-get install -y --no-install-recommends \
+       postgresql-client-13 postgresql-client-14 postgresql-client-15 \
+       postgresql-client-16 postgresql-client-17 && \
+    rm -rf /var/lib/apt/lists/*
+
+# Create symlinks for PostgreSQL client tools
+RUN for v in 13 14 15 16 17; do \
+      mkdir -p /usr/pgsql-$v/bin && \
+      for b in pg_dump psql pg_restore createdb dropdb; do \
+        ln -sf /usr/bin/$b /usr/pgsql-$v/bin/$b; \
+      done; \
+    done
+
+WORKDIR /app
+
+# Copy Goose from build stage
+COPY --from=backend-build /usr/local/bin/goose /usr/local/bin/goose
+
+# Copy app binary 
+COPY --from=backend-build /app/main .
+
+# Copy migrations directory
+COPY backend/migrations ./migrations
+
+# Copy UI files
+COPY --from=backend-build /app/ui/build ./ui/build
+
+# Copy .env file (with fallback to .env.production.example)
+COPY backend/.env* /app/
+RUN if [ ! -f /app/.env ]; then \
+      if [ -f /app/.env.production.example ]; then \
+        cp /app/.env.production.example /app/.env; \
+      fi; \
+    fi
+
+EXPOSE 4005
+
+CMD ["./main"]

Dockerfile

@@ -0,0 +1,13 @@
+# docker-compose.yml
+DEV_DB_NAME=postgresus
+DEV_DB_USERNAME=postgres
+DEV_DB_PASSWORD=Q1234567
+#app
+ENV_MODE=development
+# db
+DATABASE_DSN=host=dev-db user=postgres password=Q1234567 dbname=postgresus port=5437 sslmode=disable
+DATABASE_URL=postgres://postgres:Q1234567@dev-db:5437/postgresus?sslmode=disable
+# migrations
+GOOSE_DRIVER=postgres
+GOOSE_DBSTRING=postgres://postgres:Q1234567@dev-db:5437/postgresus?sslmode=disable
+GOOSE_MIGRATION_DIR=./migrations

backend/.env.development.example

@@ -9,4 +9,5 @@ swagger/*
 swagger/docs.go
 swagger/swagger.json
 swagger/swagger.yaml
-postgresus-backend.exe
+postgresus-backend.exe
+ui/build/*

backend/.env.example backend/.env.production.examplebackend/.env.example renamed to backend/.env.production.example

@@ -3,14 +3,14 @@ package main
 import (
 	"context"
 	"log/slog"
+	"net/http"
 	"os"
 	"os/exec"
 	"os/signal"
+	"path/filepath"
 	"syscall"
 	"time"
 
-	"net/http"
-
 	"postgresus-backend/internal/config"
 	"postgresus-backend/internal/downdetect"
 	"postgresus-backend/internal/features/backups"
@@ -51,30 +51,11 @@ func main() {
 	gin.SetMode(gin.ReleaseMode)
 	ginApp := gin.Default()
 
-	// Setup CORS
-	ginApp.Use(cors.New(cors.Config{
-		AllowOrigins: []string{"*"},
-		AllowMethods: []string{"GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"},
-		AllowHeaders: []string{
-			"Origin",
-			"Content-Length",
-			"Content-Type",
-			"Authorization",
-			"Accept",
-			"Accept-Language",
-			"Accept-Encoding",
-			"Access-Control-Request-Method",
-			"Access-Control-Request-Headers",
-			"Access-Control-Allow-Methods",
-			"Access-Control-Allow-Headers",
-			"Access-Control-Allow-Origin",
-		},
-		AllowCredentials: true,
-	}))
-
+	enableCors(ginApp)
 	setUpRoutes(ginApp)
 	setUpDependencies()
 	runBackgroundTasks(log)
+	mountFrontend(ginApp)
 
 	startServerWithGracefulShutdown(log, ginApp)
 }
@@ -171,6 +152,10 @@ func runWithPanicLogging(log *slog.Logger, serviceName string, fn func()) {
 // is generated into Go files. So if we changed files, we generate
 // new docs, but still need to restart the server to see them.
 func generateSwaggerDocs(log *slog.Logger) {
+	if config.GetEnv().EnvMode == env_utils.EnvModeProduction {
+		return
+	}
+
 	// Run swag from the current directory instead of parent
 	// Use the current directory as the base for swag init
 	// This ensures swag can find the files regardless of where the command is run from
@@ -212,3 +197,42 @@ func runMigrations(log *slog.Logger) {
 
 	log.Info("Database migrations completed successfully", "output", string(output))
 }
+
+func enableCors(ginApp *gin.Engine) {
+	if config.GetEnv().EnvMode == env_utils.EnvModeDevelopment {
+		// Setup CORS
+		ginApp.Use(cors.New(cors.Config{
+			AllowOrigins: []string{"*"},
+			AllowMethods: []string{"GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"},
+			AllowHeaders: []string{
+				"Origin",
+				"Content-Length",
+				"Content-Type",
+				"Authorization",
+				"Accept",
+				"Accept-Language",
+				"Accept-Encoding",
+				"Access-Control-Request-Method",
+				"Access-Control-Request-Headers",
+				"Access-Control-Allow-Methods",
+				"Access-Control-Allow-Headers",
+				"Access-Control-Allow-Origin",
+			},
+			AllowCredentials: true,
+		}))
+	}
+}
+
+func mountFrontend(ginApp *gin.Engine) {
+	staticDir := "./ui/build"
+	ginApp.NoRoute(func(c *gin.Context) {
+		path := filepath.Join(staticDir, c.Request.URL.Path)
+
+		if info, err := os.Stat(path); err == nil && !info.IsDir() {
+			c.File(path)
+			return
+		}
+
+		c.File(filepath.Join(staticDir, "index.html"))
+	})
+}

backend/.gitignore

@@ -0,0 +1,2 @@
+In production during the build process, the ui is built
+and will be placed in this folder under /build

backend/Dockerfile

@@ -1,30 +1,21 @@
 version: "3"
 
 services:
-  postgresus-frontend:
+  postgresus:
     build:
-      context: ./frontend
-      dockerfile: Dockerfile
-    ports:
-      - "4006:4006"
-
-  postgresus-backend:
-    build:
-      context: ./backend
+      context: .
       dockerfile: Dockerfile
     ports:
       - "4005:4005"
-    volumes:
-      - ./postgresus-data:/postgresus-data
 
   postgresus-db:
-    env_file:
-      - .env
     image: postgres:17
+    # we use default values, but do not expose
+    # PostgreSQL ports so it is safe
     environment:
-      - POSTGRES_DB=${DB_NAME}
-      - POSTGRES_USER=${DB_USERNAME}
-      - POSTGRES_PASSWORD=${DB_PASSWORD}
+      - POSTGRES_DB=postgresus
+      - POSTGRES_USER=postgresus
+      - POSTGRES_PASSWORD=postgresus
     volumes:
       - ./pgdata:/var/lib/postgresql/data
     container_name: postgresus-db