migrate to azure dev

Author: nasdan

.github/workflows/dev-cd.yml

@@ -5,18 +5,41 @@ on:
   push:
     branches:
       - develop
+env:
+  IMAGE_NAME: ghcr.io/lemoncode/code-paster:dev-${{github.sha}}-${{github.run_attempt}}
+
+permissions:
+  contents: 'read'
+  packages: 'write'
 
 jobs:
-  dev-cd:
-    uses: lemoncode/actions/.github/workflows/aws-ebs.yml@main
-    with:
-      files-to-zip: "back/** back/.babelrc front/** front/.babelrc Dockerfile .dockerignore"
-      dockerArgs: "BASE_API_URL=https://dev.codepaster.net \
-        BASE_SOCKET_URL=https://dev.codepaster.net"
-    secrets:
-      AWS_EB_APP_NAME: ${{secrets.DEV_AWS_EB_APP_NAME}}
-      AWS_EB_ENV_NAME: ${{secrets.DEV_AWS_EB_ENV_NAME}}
-      AWS_DEPLOY_ACCESS_KEY_ID: ${{secrets.DEV_AWS_DEPLOY_ACCESS_KEY_ID}}
-      AWS_DEPLOY_SECRET_ACCESS_KEY: ${{secrets.DEV_AWS_DEPLOY_SECRET_ACCESS_KEY}}
-      AWS_REGION: ${{secrets.DEV_AWS_REGION}}
-      AWS_DEPLOY_S3_BUCKET: ${{secrets.DEV_AWS_DEPLOY_S3_BUCKET}}
+  deploy:
+    runs-on: ubuntu-latest
+    environment:
+      name: 'Development'
+      url: https://dev-codepaster.azurewebsites.net
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+
+      - name: Log in to GitHub container registry
+        uses: docker/login-action@v2
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push docker image
+        run: |
+          docker build \
+          --build-arg BASE_API_URL=https://dev-codepaster.azurewebsites.net \
+          --build-arg BASE_SOCKET_URL=https://dev-codepaster.azurewebsites.net \
+          -t ${{env.IMAGE_NAME}} -f azure.Dockerfile .
+          docker push ${{env.IMAGE_NAME}}
+
+      - name: Deploy to Azure
+        uses: azure/webapps-deploy@v2
+        with:
+          app-name: ${{ secrets.DEV_AZURE_APP_NAME }}
+          publish-profile: ${{ secrets.DEV_AZURE_PUBLISH_PROFILE }}
+          images: ${{env.IMAGE_NAME}}

Dockerfile

@@ -27,7 +27,7 @@ COPY ./back/package-lock.json ./
 RUN npm ci --only=production
 
 EXPOSE 3000
-ENV PORT=3000
+ENV INTERNAL_PORT=3000
 ENV NODE_ENV=production
 ENV STATIC_FILES_PATH=./public
 ENV MOCK_REPOSITORY=false

azure.Dockerfile

@@ -0,0 +1,47 @@
+FROM node:16-alpine AS base
+RUN mkdir -p /usr/app
+WORKDIR /usr/app
+
+# Build front
+FROM base AS build-frontend
+ARG BASE_API_URL
+ENV BASE_API_URL=$BASE_API_URL
+ARG BASE_SOCKET_URL
+ENV BASE_SOCKET_URL=$BASE_SOCKET_URL
+COPY ./front ./
+RUN npm ci
+RUN npm run build
+
+# Build backend
+FROM base AS build-backend
+COPY ./back ./
+RUN npm ci
+RUN npm run build
+
+# Release
+FROM base AS release
+ENV NODE_ENV=production
+ENV STATIC_FILES_PATH=./public
+COPY --from=build-backend /usr/app/dist ./
+COPY --from=build-frontend /usr/app/dist $STATIC_FILES_PATH
+COPY ./back/package.json ./
+COPY ./back/package-lock.json ./
+RUN npm ci --only=production
+
+FROM nasdan/azure-pm2-nginx
+ENV NODE_ENV=production
+ENV STATIC_FILES_PATH=./public
+ENV MOCK_REPOSITORY=false
+ENV CORS_ORIGIN=false
+ENV API_URL=/api
+COPY --from=release /usr/app ./
+
+COPY nginx.conf /etc/nginx/conf.d/default.conf
+
+ENV INTERNAL_PORT=3000
+RUN sed -i -e 's|INTERNAL_PORT|'"$INTERNAL_PORT"'|g' /etc/nginx/conf.d/default.conf
+
+CMD sh docker-entrypoint.sh && \
+  sed -i -e 's|PORT|80|g' /etc/nginx/conf.d/default.conf && \
+  pm2 start ./index.js --name "app" --env production && \
+  nginx -g 'daemon off;'

back/.env

@@ -1,5 +1,5 @@
 NODE_ENV=development
-PORT=8081
+INTERNAL_PORT=8081
 MOCK_REPOSITORY=false
 API_URL=/api
 CORS_ORIGIN=http://localhost:8080

back/src/core/constants/env.constants.ts

@@ -1,6 +1,6 @@
 export const envConstants = {
   NODE_ENV: process.env.NODE_ENV,
-  PORT: process.env.PORT,
+  PORT: process.env.INTERNAL_PORT,
   isMockRepository: process.env.MOCK_REPOSITORY === 'true',
   MONGODB_URI: process.env.MONGODB_URI,
   API_URL: process.env.API_URL,

nginx.conf

@@ -0,0 +1,24 @@
+upstream app {
+  server 127.0.0.1:INTERNAL_PORT;
+}
+
+server {
+  listen PORT default_server;
+
+  server_name _;
+
+  if ($http_x_forwarded_proto != "https") {
+    return 301 https://$host$request_uri;
+  }
+
+  proxy_http_version 1.1;
+  proxy_set_header Upgrade $http_upgrade;
+  proxy_set_header Connection 'upgrade';
+  proxy_set_header Host $host;
+  proxy_cache_bypass $http_upgrade;
+
+  location / {
+    client_max_body_size 10m;
+    proxy_pass http://app;
+  }
+}