Create docker image for release

Author: AminArria

Makefile

@@ -27,3 +27,6 @@ ops_start:
 
 dev_ui:
 	cd priv/ui && ${shell command -v rlwrap} lein figwheel
+
+app_image:
+	docker build -f docker/Dockerfile -t holiday-ping .

README.md

@@ -40,7 +40,20 @@ Which uses figwheel to provide a REPL and hot-reload of the code changes.
 
 ## Production install
 
-Inside the devops folder you can find an install shell script for installing holiday_ping in a debian 9 serer.
+Inside the devops folder you can find an [install shell script](devops/sh/install.sh) for installing holiday_ping in a debian 9 server. On the other hand, you can do `make app_image` to generate a Docker image of HolidayPing called `holiday-ping`.
+
+The release generated for `prod` expects some config values from the environment. If you prefer, you can modify [prod.config](conf/prod.config) to directly set the values and re-make the release or image. The expected environment variables are this:
+
+- `RELX_REPLACE_OS_VARS=true`
+- `SSL_CERTFILE=</dir/of/ssl/fullchain.pem>`
+- `SSL_KEYFILE=</dir/of/ssl/privkey.pem>`
+- `TOKEN_SECRET=<secret_token_hash>`
+- `POSTGRES_HOST=<holiday_ping_postgres_1>`
+- `POSTGRES_USER=<postgres user>`
+- `POSTGRES_PASSWORD=<postgres user password>`
+- `POSTGRES_DB=<postgres database>`
+
+**NOTE:** Remember to mount the folder where `SSL_CERTFILE` and `SSL_KEYFILE` are stored into the container.
 
 ### Credentials
 #### GitHub login configuration

conf/prod.config

@@ -2,21 +2,22 @@
  {holiday_ping, [
                  {protocol, https},
                  {port, 443},
-                 {certfile, "/etc/letsencrypt/live/holidayping.lambdaclass.com/fullchain.pem"},
-                 {keyfile, "/etc/letsencrypt/live/holidayping.lambdaclass.com/privkey.pem"},
-                 {token_secret, <<"FIXME!!!">>},
+                 {certfile, "${SSL_CERTFILE}"},
+                 {keyfile, "${SSL_KEYFILE}"},
+                 {token_secret, "${TOKEN_SECRET}"},
                  {token_expiration, 86400},
                  {verification_code_expiration, 300},
                  {password_code_expiration, 300},
                  {checker_interval, 900000},
-                 {email_enabled, true},
+                 {email_enabled, false},
                  {monthly_limits, #{slack => 100,
                                     email => 100,
                                     webhook => 100}},
                  {pg_options, [{size, 10},
-                               {database, "holiday_ping"},
-                               {username, "holiday_ping"},
-                               {password, "holiday_ping"}]}
+                               {host, "${POSTGRES_HOST}"},
+                               {database, "${POSTGRES_DB}"},
+                               {username, "${POSTGRES_USER}"},
+                               {password, "${POSTGRES_PASSWORD}"}]}
                 ]},
  {throttle, [{rates, [{global_api_rate, 5, per_second},
                       %% these rates have to also consider failed requests (e.g. 4xx responses)

docker/Dockerfile

@@ -0,0 +1,41 @@
+########
+FROM clojure:lein-2.5.3
+
+WORKDIR /opt/holiday_ping/priv/ui
+
+COPY priv/ui .
+RUN lein deps
+RUN lein do clean, cljsbuild once min
+
+##########
+FROM erlang:20.3.8.23-alpine
+
+WORKDIR /opt/holiday_ping
+
+RUN apk add --update bsd-compat-headers build-base git
+
+COPY rebar.config rebar.lock ./
+RUN rebar3 compile
+
+COPY conf conf
+COPY src src
+COPY --from=0 /opt/holiday_ping/priv/ui/resources/public priv/ui/resources/public
+RUN rebar3 compile
+RUN rebar3 as prod release tar
+RUN mkdir rel
+RUN tar -vxf _build/prod/rel/holiday_ping/*.tar.gz -C rel
+
+#######
+FROM alpine:3.9
+
+WORKDIR /opt/holiday_ping
+
+RUN apk add --update ncurses
+
+COPY --from=1 /opt/holiday_ping/rel .
+# COPY --from=1 /opt/holiday_ping/priv/ui priv/ui
+# COPY --from=1 /opt/holiday_ping/priv/ui /ui
+# COPY --from=1 /opt/holiday_ping/priv/ui bin/priv/ui
+
+ENTRYPOINT ["/opt/holiday_ping/bin/holiday_ping"]
+CMD ["foreground"]