Ilia Denisov
f20a4b49ff
- gateway/Dockerfile gains a `landing` target: caddy:2-alpine + the shared Vite build (identical build args keep the ui stage a single cached build); the gateway target drops landing.html from the embed. - The contour caddy routes /app/, /telegram/ and the Connect path to the gateway; the catch-all — the landing at / and any stray path — goes to the new landing service, so junk traffic is absorbed by static file serving. - deploy/landing/Caddyfile mirrors the webui caching (immutable assets, no-cache shells) and falls back unknown paths to the landing shell. - The gateway's / now 308-redirects to /app/ (keeps a local no-caddy run usable); webui placeholder landing.html removed. - CI deploy probe checks both / (landing) and /app/ (gateway). Verified: both images build; the landing container serves landing.html at / (no-cache) with junk-path fallback; the gateway image redirects / to /app/ and carries no landing content.
75 lines
3.5 KiB
Docker
75 lines
3.5 KiB
Docker
# Multi-stage build for the gateway service and the landing image. A node stage
|
|
# builds the static UI (Vite) once; the `landing` target serves that build from a
|
|
# static caddy container (the public landing at /, R3), while the final gateway
|
|
# target embeds it — minus landing.html — into the Go binary
|
|
# (gateway/internal/webui/dist), which serves the game SPA at /app/ and
|
|
# /telegram/ (docs/ARCHITECTURE.md §13). The Go stage mirrors
|
|
# platform/telegram/Dockerfile and ships on distroless nonroot.
|
|
#
|
|
# The production UI build vars are image build-args, baked into the bundle.
|
|
# Build from the repository root so go.work, pkg/, gateway/, ui/ and
|
|
# deploy/landing/ are all in the Docker context:
|
|
# docker build -f gateway/Dockerfile \
|
|
# --build-arg VITE_GATEWAY_URL=https://example \
|
|
# -t scrabble-gateway .
|
|
# docker build -f gateway/Dockerfile --target landing -t scrabble-landing .
|
|
|
|
# --- UI build ----------------------------------------------------------------
|
|
FROM node:22-alpine AS ui
|
|
WORKDIR /ui
|
|
RUN corepack enable && corepack prepare pnpm@11.0.9 --activate
|
|
|
|
# Prod UI build vars (Vite reads VITE_-prefixed env at build; baked into the bundle).
|
|
# VITE_APP_VERSION carries `git describe` for the About screen (defaults to "dev").
|
|
ARG VITE_TELEGRAM_BOT_ID=
|
|
ARG VITE_TELEGRAM_LINK=
|
|
ARG VITE_TELEGRAM_GAME_CHANNEL_NAME_EN=
|
|
ARG VITE_TELEGRAM_GAME_CHANNEL_NAME_RU=
|
|
ARG VITE_GATEWAY_URL=
|
|
ARG VITE_APP_VERSION=
|
|
ENV VITE_TELEGRAM_BOT_ID=$VITE_TELEGRAM_BOT_ID \
|
|
VITE_TELEGRAM_LINK=$VITE_TELEGRAM_LINK \
|
|
VITE_TELEGRAM_GAME_CHANNEL_NAME_EN=$VITE_TELEGRAM_GAME_CHANNEL_NAME_EN \
|
|
VITE_TELEGRAM_GAME_CHANNEL_NAME_RU=$VITE_TELEGRAM_GAME_CHANNEL_NAME_RU \
|
|
VITE_GATEWAY_URL=$VITE_GATEWAY_URL \
|
|
VITE_APP_VERSION=$VITE_APP_VERSION
|
|
|
|
# Install with the lockfile first (the workspace file carries pnpm's build-script
|
|
# approval for esbuild), then build. Committed src/gen/ means no codegen here.
|
|
COPY ui/package.json ui/pnpm-lock.yaml ui/pnpm-workspace.yaml ./
|
|
RUN pnpm install --frozen-lockfile
|
|
COPY ui ./
|
|
RUN pnpm build
|
|
|
|
# --- landing -------------------------------------------------------------------
|
|
# The public landing page as its own static container (R3): the same Vite build
|
|
# served by caddy at /, so stray public traffic is absorbed by static file
|
|
# serving and never reaches the Go edge.
|
|
FROM caddy:2-alpine AS landing
|
|
COPY deploy/landing/Caddyfile /etc/caddy/Caddyfile
|
|
COPY --from=ui /ui/dist /srv
|
|
|
|
# --- Go build ----------------------------------------------------------------
|
|
FROM golang:1.26.3-alpine AS build
|
|
WORKDIR /src
|
|
COPY go.work go.work.sum ./
|
|
COPY pkg ./pkg
|
|
COPY gateway ./gateway
|
|
|
|
# Replace the committed placeholder with the freshly built UI before compiling, so
|
|
# go:embed bakes the real bundle into the binary. The landing shell ships in the
|
|
# landing image, not in the gateway (R3).
|
|
RUN rm -rf gateway/internal/webui/dist
|
|
COPY --from=ui /ui/dist gateway/internal/webui/dist
|
|
RUN rm gateway/internal/webui/dist/landing.html
|
|
|
|
# Reduce the workspace to what the gateway needs: gateway + pkg (loadtest is not in
|
|
# this context; its scrabble/gateway replace targets ./gateway, which is present here).
|
|
RUN go work edit -dropuse=./backend -dropuse=./platform/telegram -dropuse=./loadtest
|
|
RUN CGO_ENABLED=0 GOOS=linux go build -trimpath -o /out/gateway ./gateway/cmd/gateway
|
|
|
|
# --- runtime -----------------------------------------------------------------
|
|
FROM gcr.io/distroless/static-debian12:nonroot AS gateway
|
|
COPY --from=build /out/gateway /usr/local/bin/gateway
|
|
ENTRYPOINT ["/usr/local/bin/gateway"]
|