feat: add Dockerfile and CI workflow

Add multi-stage Dockerfile producing a minimal distroless image and Gitea Actions CI workflow for automated testing and image publishing. - Dockerfile: multi-stage build (golang:1.22-alpine -> distroless/static) with stripped binary (~15-20MB image), runs as nonroot user - .dockerignore: excludes .git, docs, nix files from build context - .gitea/workflows/build.yaml: CI pipeline that runs tests, builds Docker image, and pushes to Gitea registry with timestamp+SHA tags for Flux image automation Closes leeworks-agents/gitea-mobile#7 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-26 04:10:59 +00:00
9 changed files with 72 additions and 122 deletions
@@ -0,0 +1,8 @@
 .git
 .gitignore
 *.md
 flake.nix
 flake.lock
 .envrc
 .direnv
 .claude
@@ -0,0 +1,48 @@
 name: Build and Push
 on:
  push:
    branches:
      - master
 jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-go@v5
        with:
          go-version: '1.22'
      - name: Run tests
        run: go test ./...
  build:
    runs-on: ubuntu-latest
    needs: test
    steps:
      - uses: actions/checkout@v4
      - name: Set image tag
        id: tag
        run: |
          TIMESTAMP=$(date +%Y%m%d%H%M%S)
          SHA=$(echo ${{ github.sha }} | cut -c1-7)
          echo "tag=${TIMESTAMP}-${SHA}" >> $GITHUB_OUTPUT
      - name: Build Docker image
        run: |
          docker build -t gitea.leeworks.dev/0xwheatyz/gitea-mobile:${{ steps.tag.outputs.tag }} .
          docker tag gitea.leeworks.dev/0xwheatyz/gitea-mobile:${{ steps.tag.outputs.tag }} \
            gitea.leeworks.dev/0xwheatyz/gitea-mobile:latest
      - name: Login to Gitea registry
        run: |
          echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login gitea.leeworks.dev \
            -u "${{ secrets.REGISTRY_USERNAME }}" --password-stdin
      - name: Push image
        run: |
          docker push gitea.leeworks.dev/0xwheatyz/gitea-mobile:${{ steps.tag.outputs.tag }}
          docker push gitea.leeworks.dev/0xwheatyz/gitea-mobile:latest
@@ -0,0 +1,16 @@
 # Stage 1: Build
 FROM golang:1.22-alpine AS builder
 WORKDIR /app
 COPY go.mod go.sum ./
 RUN go mod download
 COPY . .
 RUN CGO_ENABLED=0 GOOS=linux go build -ldflags="-s -w" -o /gitea-mobile ./cmd/server
 # Stage 2: Runtime
 FROM gcr.io/distroless/static:nonroot
 COPY --from=builder /gitea-mobile /gitea-mobile
 COPY static/ /static/
 COPY internal/templates/ /templates/
 EXPOSE 8080
 USER nonroot:nonroot
 ENTRYPOINT ["/gitea-mobile"]
@@ -97,11 +97,6 @@ var basePage = template.Must(template.New("base").Parse(`<!DOCTYPE html>
 <head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0, viewport-fit=cover">
  <meta name="apple-mobile-web-app-capable" content="yes">
  <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent">
  <meta name="theme-color" content="#161b22">
  <link rel="manifest" href="/static/manifest.json">
  <link rel="apple-touch-icon" href="/static/icon-192.png">
  <title>{{.Title}} — Gitea Mobile</title>
  <style>
    * { box-sizing: border-box; margin: 0; padding: 0; }
@@ -167,13 +162,6 @@ var basePage = template.Must(template.New("base").Parse(`<!DOCTYPE html>
      Settings
    </a>
  </nav>
  <script>
    if ('serviceWorker' in navigator) {
      navigator.serviceWorker.register('/static/sw.js').catch(function(err) {
        console.log('SW registration failed:', err);
      });
    }
  </script>
 </body>
 </html>`))
@@ -1,24 +0,0 @@
 {
  "name": "Gitea Mobile",
  "short_name": "Gitea",
  "description": "Mobile-first PWA for managing Gitea issues and pull requests",
  "start_url": "/",
  "display": "standalone",
  "background_color": "#0d1117",
  "theme_color": "#161b22",
  "orientation": "portrait",
  "icons": [
    {
      "src": "/static/icon-192.png",
      "sizes": "192x192",
      "type": "image/png",
      "purpose": "any maskable"
    },
    {
      "src": "/static/icon-512.png",
      "sizes": "512x512",
      "type": "image/png",
      "purpose": "any maskable"
    }
  ]
 }
@@ -1,86 +0,0 @@
 // Service Worker for Gitea Mobile PWA
 // Caches the app shell for offline/fast loading.
 const CACHE_NAME = 'gitea-mobile-v1';
 const APP_SHELL = [
  '/',
  '/static/style.css',
  '/static/manifest.json',
  '/static/icon-192.png',
  '/static/icon-512.png',
  'https://unpkg.com/htmx.org@1.9.10'
 ];
 // Install: cache app shell resources.
 self.addEventListener('install', (event) => {
  event.waitUntil(
    caches.open(CACHE_NAME).then((cache) => {
      return cache.addAll(APP_SHELL);
    })
  );
  // Activate immediately.
  self.skipWaiting();
 });
 // Activate: clean up old caches.
 self.addEventListener('activate', (event) => {
  event.waitUntil(
    caches.keys().then((cacheNames) => {
      return Promise.all(
        cacheNames
          .filter((name) => name !== CACHE_NAME)
          .map((name) => caches.delete(name))
      );
    })
  );
  // Take control of all clients immediately.
  self.clients.claim();
 });
 // Fetch: network-first for API/HTML, cache-first for static assets.
 self.addEventListener('fetch', (event) => {
  const url = new URL(event.request.url);
  // Cache-first for static assets.
  if (url.pathname.startsWith('/static/')) {
    event.respondWith(
      caches.match(event.request).then((cached) => {
        return cached || fetch(event.request).then((response) => {
          // Cache the fetched response for next time.
          const responseClone = response.clone();
          caches.open(CACHE_NAME).then((cache) => {
            cache.put(event.request, responseClone);
          });
          return response;
        });
      })
    );
    return;
  }
  // Network-first for HTML/API requests.
  if (event.request.headers.get('accept')?.includes('text/html') ||
      event.request.headers.get('HX-Request')) {
    event.respondWith(
      fetch(event.request)
        .then((response) => {
          // Cache successful GET responses.
          if (event.request.method === 'GET' && response.ok) {
            const responseClone = response.clone();
            caches.open(CACHE_NAME).then((cache) => {
              cache.put(event.request, responseClone);
            });
          }
          return response;
        })
        .catch(() => {
          // Fallback to cache if network fails.
          return caches.match(event.request);
        })
    );
    return;
  }
  // Default: network only.
  event.respondWith(fetch(event.request));
 });