Feature/configure base-image-update.yml pipeline

.github/workflows/base-image-update.yml

@@ -0,0 +1,78 @@
+name: Service Pipeline
+
+on:
+  workflow_call:
+    inputs:
+      image_tag:
+        required: false
+        type: string
+
+  workflow_dispatch:
+    inputs:
+      image_tag:
+        description: "Optional image tag for manual testing"
+        required: false
+        type: string
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref || github.run_id }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+  id-token: write
+  security-events: write
+
+env:
+  AWS_REGION: ${{ secrets.AWS_REGION || 'ap-southeast-2' }}
+  DOCKER_BUILDKIT: 1
+  BUILDKIT_PROGRESS: plain
+  BASE_IMAGE_TAG: ${{ inputs.image_tag}}
+
+
+jobs:
+
+  build_and_deploy:
+
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
+          aws-region: ${{ env.AWS_REGION }}
+
+      - name: Login to ECR
+        uses: aws-actions/amazon-ecr-login@v2
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build Docker image (no push yet)
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: false
+          load: true
+          tags: |
+            ${{ secrets.ECR_REGISTRY }}/dispatchai2026-backend:${{ github.sha }}
+            ${{ secrets.ECR_REGISTRY }}/dispatchai2026-backend:${{ github.ref_name }}-${{ github.run_number }}
+          platforms: linux/amd64
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          build-args: |
+            BASE_IMAGE_TAG=${{ env.BASE_IMAGE_TAG }}
+
+      - name: Push image to ECR
+        run: |
+          docker push ${{ secrets.ECR_REGISTRY }}/dispatchai2026-backend:${{ github.sha }}
+          docker push ${{ secrets.ECR_REGISTRY }}/dispatchai2026-backend:${{ github.ref_name }}-${{ github.run_number }}
+
+
+      - name: Deploy
+        run: |
+          echo "Trigger deployment (ArgoCD / ECS / Helm)"

README.md

@@ -463,6 +463,13 @@ docker run -p 4000:4000 dispatchai-backend:dev
 docker compose up api
 ```
 
+To run the docker using capet's config
+run
+'''
+docker compose up
+'''
+remember to set up the correct env.local
+
 ## 🔗 Key Integrations
 
 ### Twilio Voice API

docker-compose.yml

@@ -0,0 +1,22 @@
+version: "3.9"
+
+services:
+  api:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    env_file: .env.local
+    ports:
+      - "4000:4000"
+    depends_on:
+      - redis
+    restart: unless-stopped
+
+  redis:
+    image: redis:7-alpine
+    restart: unless-stopped
+    ports:
+      - "6379:6379"
+
+volumes:
+  mongo-data:

dockerfile

@@ -0,0 +1,38 @@
+# Stage 1 - Build
+
+ARG BASE_IMAGE_TAG = sha-8ac6c280f0265f5f0f533fe3b3130bc1086e3b2a
+
+FROM node:20-alpine AS builder
+
+WORKDIR /app
+
+RUN corepack enable
+
+COPY package.json pnpm-lock.yaml ./
+RUN pnpm fetch
+
+COPY . .
+
+RUN pnpm install --offline \
+ && pnpm build \
+ && pnpm prune --prod
+
+
+# Stage 2 - Runtime
+FROM 409171460637.dkr.ecr.ap-southeast-2.amazonaws.com/base-image:${BASE_IMAGE_TAG} AS runtime
+
+
+WORKDIR /app
+
+COPY --from=builder /app/dist ./dist
+COPY --from=builder /app/node_modules ./node_modules
+COPY --from=builder /app/package.json ./package.json
+COPY --from=builder /app/templates ./templates
+
+ENV NODE_ENV=production \
+PORT=4000
+EXPOSE 4000
+
+USER nonroot
+
+CMD [ "dist/src/main.js"]

package.json

@@ -1,23 +1,23 @@
 {
   "dependencies": {
-    "@aws-sdk/client-ses": "^3.929.0",
+    "@aws-sdk/client-ses": "^3.974.0",
     "@nestjs/axios": "^4.0.0",
     "@nestjs/common": "^11.0.11",
-    "@nestjs/config": "^4.0.1",
+    "@nestjs/config": "^4.0.3",
     "@nestjs/core": "^11.0.11",
     "@nestjs/jwt": "^11.0.0",
     "@nestjs/mapped-types": "^2.1.0",
     "@nestjs/mongoose": "^11.0.1",
     "@nestjs/passport": "^11.0.5",
-    "@nestjs/platform-express": "^11.0.11",
-    "@nestjs/swagger": "^11.0.6",
+    "@nestjs/platform-express": "^11.1.16",
+    "@nestjs/swagger": "^11.2.6",
     "@types/cookie-parser": "^1.4.9",
     "@types/passport-google-oauth20": "^2.0.16",
-    "axios": "^1.9.0",
+    "axios": "^1.13.5",
     "bcryptjs": "^3.0.2",
-    "body-parser": "^2.2.0",
+    "body-parser": "^2.2.1",
     "class-transformer": "^0.5.1",
-    "class-validator": "^0.14.1",
+    "class-validator": "^0.14.4",
     "cookie-parser": "^1.4.7",
     "dotenv": "^16.5.0",
     "express": "^5.1.0",