build dev image

Author: xc2f

.github/workflows/build-and-push-dev.yml

@@ -0,0 +1,118 @@
+name: '🚀 Deploy: Development (ECR-Dev)'
+
+on:
+  push:
+    branches:
+      - main
+    # 只有当以下路径的文件发生变动时，才触发此工作流
+    paths:
+      # Next / App
+      - 'src/**'
+      - 'public/**'
+      # Docker / Infra
+      - 'docker/**'
+      - 'docker-compose*.yml'
+      # Build & Tooling
+      - 'package.json'
+      - 'pnpm-lock.yaml'
+      - 'next.config.*'
+      - 'redirects.js'
+      - 'tailwind.config.mjs'
+      - 'postcss.config.js'
+      - 'tsconfig.json'
+      - 'components.json'
+      - 'scripts/**'
+      # Env template
+      - '.env.example'
+  workflow_dispatch:
+
+permissions:
+  id-token: write
+  contents: read
+
+env:
+  DATABASE_URL: postgres://payload:payload@localhost:5432/payload
+  AWS_SERVICE_REGION: ${{ vars.AWS_SERVICE_REGION }}
+  AWS_ACCESS_KEY: ${{ vars.AWS_ACCESS_KEY }}
+  EMAIL_DEFAULT_FROM_NAME: ${{ vars.EMAIL_DEFAULT_FROM_NAME }}
+  EMAIL_DEFAULT_FROM_NO_REPLY: ${{ vars.EMAIL_DEFAULT_FROM_NO_REPLY }}
+  EMAIL_DEFAULT_FROM: ${{ vars.EMAIL_DEFAULT_FROM }}
+  EMAIL_DEFAULT_REPLY: ${{ vars.EMAIL_DEFAULT_REPLY }}
+  NEXT_PUBLIC_SERVER_URL: ${{ vars.NEXT_PUBLIC_SERVER_URL }}
+  S3_ENDPOINT: ${{ vars.S3_ENDPOINT }}
+  S3_BUCKET: ${{ vars.S3_BUCKET }}
+  S3_ACCESS_KEY_ID: ${{ vars.S3_ACCESS_KEY_ID }}
+  S3_REGION: ${{ vars.S3_REGION }}
+
+  AWS_ACCESS_SECRET: ${{ secrets.AWS_ACCESS_SECRET }}
+  CRON_SECRET: ${{ secrets.CRON_SECRET }}
+  PREVIEW_SECRET: ${{ secrets.PREVIEW_SECRET }}
+  PAYLOAD_SECRET: ${{ secrets.PAYLOAD_SECRET }}
+  S3_SECRET: ${{ secrets.S3_SECRET }}
+
+jobs:
+  build:
+    runs-on: ubuntu-24.04-arm
+    environment: production
+
+    services:
+      postgres:
+        image: postgres:16
+        ports:
+          - 5432:5432
+        env:
+          POSTGRES_DB: payload
+          POSTGRES_USER: payload
+          POSTGRES_PASSWORD: payload
+        options: >-
+          --health-cmd="pg_isready -U payload"
+          --health-interval=10s
+          --health-timeout=5s
+          --health-retries=5
+
+    steps:
+      - name: Checkout source
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          persist-credentials: true
+
+      - name: Install pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          cache: true
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Migrate database
+        run: pnpm payload migrate
+
+      - name: Build Next (standalone)
+        run: pnpm build
+
+      - name: Prepare .dockerignore for Dev
+        run: |
+          # 把 node_modules 和所有源码打进去
+          echo ".git" > .dockerignore
+          echo ".next/cache" >> .dockerignore
+          echo "node_modules/.cache" >> .dockerignore
+          echo "==== Current .dockerignore ===="
+          cat .dockerignore
+
+      - name: Configure AWS credentials (OIDC)
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: arn:aws:iam::022948663888:role/github-ci-role
+          aws-region: us-east-1 # Public ECR 固定这个
+
+      - name: Log in to Amazon ECR Public
+        uses: aws-actions/amazon-ecr-login@v2
+        with:
+          registry-type: public
+
+      - name: Build and Push Docker image (ARM64 only)
+        run: |
+          REGISTRY=public.ecr.aws/umcai/xc2f/payload
+          docker build -f docker/Dockerfile.dev -t $REGISTRY:dev-latest .
+          docker push $REGISTRY:dev-latest

docker-compose.dev.yml

@@ -0,0 +1,30 @@
+services:
+  payload:
+    restart: always
+    image: public.ecr.aws/umcai/xc2f/payload:dev-latest
+    container_name: payload
+    ports:
+      - '3000:3000'
+    depends_on:
+      - postgres
+    env_file:
+      - .env
+
+  postgres:
+    restart: always
+    image: postgres:latest
+    container_name: postgres
+    command: postgres -c config_file=/var/lib/postgresql/postgresql.conf
+    volumes:
+      - pgdata:/var/lib/postgresql
+      - ./postgres/postgresql.conf:/var/lib/postgresql/postgresql.conf:ro
+      - ./postgres/pg_hba.conf:/var/lib/postgresql/pg_hba.conf:ro
+    environment:
+      - POSTGRES_USER=${DATABASE_USER}
+      - POSTGRES_PASSWORD=${DATABASE_PASSWORD}
+      - POSTGRES_DB=${DATABASE_NAME}
+
+volumes:
+  pgdata:
+    external: true
+    name: xc2f_pgdata

docker/Dockerfile.dev

@@ -0,0 +1,9 @@
+FROM node:24-alpine
+
+WORKDIR /app
+ENV NODE_ENV=production
+
+COPY . .
+
+EXPOSE 3000
+CMD ["node", "server.js"]

scripts/deploy-build.sh

@@ -0,0 +1,21 @@
+#!/usr/bin/env bash
+set -e
+
+PROJECT_DIR="$(cd "$(dirname "$0")/.." && pwd)"
+
+cd "$PROJECT_DIR"
+
+echo "👉 Pull main"
+git pull origin main
+
+echo "👉 Fetch build"
+git fetch origin build
+
+echo "👉 Clean build artifacts"
+rm -rf .next public
+
+echo "👉 Restore build artifacts"
+git restore --source origin/build .next public
+
+echo "👉 Start docker"
+docker-compose up -d