Docker/setup push pipeline

.github/workflows/docker-publish.yml

@@ -0,0 +1,70 @@
+name: Docker Build & Push Services
+
+on:
+  push:
+    branches: [ "master"]
+  # Manual Trigger with dropdown
+  workflow_dispatch:
+    inputs:
+      service_target:
+        description: 'Which service to build?'
+        required: true
+        type: choice
+        default: 'all'
+        options: 
+          - all
+          - auth-service
+          - frontend-service
+          - login-service
+          - metadata-service
+          - notification-service
+      version:
+        description: 'Version Tag (e.g., v1.2.0)'
+        required: false
+        default: ''
+
+jobs:
+  build-and-push-services:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        service:
+          - name: auth-service
+            image_suffix: microforge-auth-service
+          - name: frontend-service
+            image_suffix: microforge-frontend-service
+          - name: login-service
+            image_suffix: microforge-login-service
+          - name: metadata-service
+            image_suffix: microforge-metadata-service
+          - name: notification-service
+            image_suffix: microforge-notification-service
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+      - name: Build and push
+        uses: docker/build-push-action@v5
+        # LOGIC: Run if target is 'all' OR matches the current service name
+        if: ${{ inputs.service_target == 'all' || inputs.service_target == matrix.service || github.event_name == 'push' }}
+        env:
+          # Logic: Only create this tag if input.version is NOT empty
+          MANUAL_TAG: ${{ inputs.version != '' && format('{0}/microforge:{1}-{2}', secrets.DOCKER_USERNAME, matrix.service, inputs.version) || '' }}
+        with:
+          context: .
+          file: ./Dockerfile
+          target: ${{ matrix.service.name }}
+          push: true
+          tags: |
+            ${{ secrets.DOCKER_USERNAME }}/microforge:${{ matrix.service.name }}-latest
+            ${{ secrets.DOCKER_USERNAME }}/microforge:${{ matrix.service.name }}-${{ github.sha }}
+            ${{ env.MANUAL_TAG }}

Dockerfile

@@ -0,0 +1,117 @@
+# Dockerfile for MicroForge
+
+# ==============================================================================
+# Auth Service
+# ==============================================================================
+FROM golang:1.25.1-bookworm AS auth-service-builder
+
+WORKDIR /usr/src/app
+
+COPY ./src/auth-service/go.mod ./src/auth-service/go.sum ./
+RUN go mod download
+
+COPY ./src/auth-service/ ./
+
+RUN CGO_ENABLED=0 GOOS=linux GO111MODULE=on go build -ldflags "-s -w" -o /auth-service main.go
+
+FROM gcr.io/distroless/static-debian12:nonroot AS auth-service
+WORKDIR /usr/src/app
+
+COPY --from=auth-service-builder /auth-service ./
+
+EXPOSE 8082
+
+ENTRYPOINT [ "./auth-service" ]
+
+# ==============================================================================
+# Frontend Service
+# ==============================================================================
+FROM docker.io/library/node:22-slim AS frontend-service-builder
+
+WORKDIR /app
+
+COPY ./src/frontend-service/package.json ./src/frontend-service/package-lock.json ./
+RUN npm ci
+
+COPY ./src/frontend-service/src/ ./src/
+COPY ./src/frontend-service/public/ ./public/
+
+RUN npm run build
+
+FROM nginx:alpine AS frontend-service
+COPY --from=frontend-service-builder /app/build /usr/share/nginx/html
+COPY ./src/frontend-service/nginx.conf /etc/nginx/conf.d/default.conf
+COPY ./src/frontend-service/config.template.json /usr/share/nginx/html/config.template.json
+COPY ./src/frontend-service/frontendEntrypoint.sh /frontendEntrypoint.sh
+RUN chmod +x /frontendEntrypoint.sh
+
+EXPOSE 80
+ENTRYPOINT [ "/frontendEntrypoint.sh" ]
+
+# ==============================================================================
+# Login Service
+# ==============================================================================
+FROM eclipse-temurin:21.0.5_11-jdk-jammy AS login-service-builder
+
+WORKDIR /app
+
+COPY ./src/login-service/mvnw ./
+COPY ./src/login-service/.mvn/ ./.mvn/
+COPY ./src/login-service/pom.xml ./
+
+RUN chmod +x mvnw && ./mvnw dependency:go-offline
+
+COPY ./src/login-service/src ./src/
+
+RUN ./mvnw clean package -DskipTests
+
+FROM gcr.io/distroless/java21-debian12:latest AS login-service
+
+WORKDIR /app
+
+COPY --from=login-service-builder /app/target/login-service-1.0.0.jar login-service.jar
+
+EXPOSE 8081
+
+ENTRYPOINT [ "java" , "-jar", "login-service.jar" ]
+
+# ==============================================================================
+# Metadata Service
+# ==============================================================================
+FROM docker.io/library/python:3.12-alpine3.22 AS metadata-service-builder
+
+RUN apk update && \
+    apk add gcc g++ linux-headers
+
+WORKDIR /app
+
+COPY ./src/metadata-service/requirements.txt requirements.txt
+
+RUN python -m venv /opt/venv && \
+    /opt/venv/bin/pip install -r requirements.txt
+
+FROM docker.io/library/python:3.12-alpine3.22 AS metadata-service
+
+COPY --from=metadata-service-builder /opt/venv /opt/venv
+
+WORKDIR /app
+
+COPY ./src/metadata-service/ .
+
+CMD ["/opt/venv/bin/gunicorn", "app:app", "--workers", "4", "--bind", "0.0.0.0:8084"]
+
+# ==============================================================================
+# Notification Service
+# ==============================================================================
+FROM node:18-alpine AS notification-service-builder
+WORKDIR /app
+COPY ./src/notification-service/package.json ./src/notification-service/package-lock.json ./
+RUN npm ci
+
+FROM gcr.io/distroless/nodejs18-debian11:nonroot AS notification-service
+WORKDIR /app
+
+COPY --from=notification-service-builder /app/node_modules ./node_modules
+COPY ./src/notification-service/ .
+
+CMD [ "app.js" ]