update repo with ci and configs and docker builds

Author: AbstractUmbra

.dockerignore

@@ -0,0 +1,21 @@
+__pycache__/
+*.py[cod]
+_pyright/
+.git/
+.github/
+.venv/
+.vscode/
+botw/
+buffer/
+configs/
+duckling/
+extensions/
+logs/
+schemas/
+.gitignore
+.gitmodules
+**/*.ipynb
+docker-compose.yml
+Dockerfile
+LICENSE
+README.md

.github/workflows/build_and_push.yaml

@@ -0,0 +1,55 @@
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+
+# GitHub recommends pinning actions to a commit SHA.
+# To get a newer version, you will need to update the SHA.
+# You can also reference a tag or branch, but the action may change without warning.
+
+name: Create and publish a Docker image
+
+on:
+  push:
+    branches:
+      - main
+
+concurrency:
+  cancel-in-progress: true
+  group: ci-${{ github.ref }}
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+
+jobs:
+  build-and-push-image:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+
+      - name: Log in to the Container registry
+        uses: docker/login-action@master
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata (tags, labels) for Docker
+        id: meta
+        uses: docker/metadata-action@master
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@master
+        with:
+          context: .
+          push: true
+          tags: "ghcr.io/pythonistaguild/pythonista-api:latest"
+          labels: ${{ steps.meta.outputs.labels }}

.github/workflows/coverage_and_lint.yml

@@ -72,13 +72,4 @@ jobs:
 
       - name: Lint
         if: ${{ always() && steps.install-deps.outcome == 'success' }}
-        uses: github/super-linter/slim@v4
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          DEFAULT_BRANCH: main
-          VALIDATE_ALL_CODEBASE: false
-          VALIDATE_PYTHON_BLACK: true
-          VALIDATE_PYTHON_ISORT: true
-          LINTER_RULES_PATH: /
-          PYTHON_ISORT_CONFIG_FILE: pyproject.toml
-          PYTHON_BLACK_CONFIG_FILE: pyproject.toml
+        uses: chartboost/ruff-action@v1

.github/workflows/deploy.yaml

@@ -0,0 +1,27 @@
+name: Deploy
+
+on:
+  workflow_run:
+    workflows: ["Create and publish a Docker image"]
+    branches: [main]
+    types:
+      - completed
+
+jobs:
+    deploy:
+      name: Deploy bot
+      runs-on: ubuntu-latest
+      steps:
+        - name: Remote deploy
+          uses: appleboy/ssh-action@master
+          with:
+            host: ${{ secrets.SSH_HOST }}
+            key: ${{ secrets.SSH_KEY }}
+            port: ${{ secrets.SSH_PORT }}
+            script: |
+              cd ~/projects/pythonista-api/
+              git reset --hard HEAD || true
+              git pull origin main
+              docker compose pull
+              docker compose up -d --build --force-recreate
+            username: ${{ secrets.SSH_USER }}

Dockerfile

@@ -0,0 +1,56 @@
+FROM python:3.11-slim
+
+LABEL org.opencontainers.image.source=https://github.com/PythonistaGuild/Pythonista-API
+LABEL org.opencontainers.image.description="Pythonista API"
+LABEL org.opencontainers.image.licenses=MIT
+
+ENV PYTHONUNBUFFERED=1 \
+    # prevents python creating .pyc files
+    PYTHONDONTWRITEBYTECODE=1 \
+    \
+    # pip
+    PIP_NO_CACHE_DIR=off \
+    PIP_DISABLE_PIP_VERSION_CHECK=on \
+    PIP_DEFAULT_TIMEOUT=100 \
+    \
+    # poetry
+    # https://python-poetry.org/docs/configuration/#using-environment-variables
+    # make poetry install to this location
+    POETRY_HOME="/opt/poetry" \
+    # make poetry create the virtual environment in the project's root
+    # it gets named `.venv`
+    POETRY_VIRTUALENVS_IN_PROJECT=true \
+    # do not ask any interactive question
+    POETRY_NO_INTERACTION=1 \
+    \
+    # paths
+    # this is where our requirements + virtual environment will live
+    PYSETUP_PATH="/opt/pysetup" \
+    VENV_PATH="/opt/pysetup/.venv"
+
+ENV PATH="$POETRY_HOME/bin:$VENV_PATH/bin:$PATH"
+
+RUN apt-get update \
+    && apt-get install --no-install-recommends -y \
+    git \
+    # deps for installing poetry
+    curl \
+    ca-certificates \
+    # deps for building python deps
+    build-essential \
+    libcurl4-gnutls-dev \
+    gnutls-dev \
+    gnupg \
+    libmagic-dev
+
+RUN curl -sSL https://install.python-poetry.org | python -
+
+# copy project requirement files here to ensure they will be cached.
+WORKDIR /app
+COPY poetry.lock pyproject.toml ./
+
+# install runtime deps - uses $POETRY_VIRTUALENVS_IN_PROJECT internally
+RUN poetry install --without=dev
+
+COPY . /app/
+ENTRYPOINT poetry run python -O launcher.py

docker-compose.yml

@@ -0,0 +1,19 @@
+version: "3"
+
+services:
+  api:
+    container_name: pythonista-api
+    build:
+      context: .
+      dockerfile: Dockerfile
+    extra_hosts:
+      - "database:host-gateway"
+    restart: unless-stopped
+    networks:
+      - main
+    volumes:
+      - "./config.toml:/app/config.toml:ro"
+
+networks:
+  main:
+    external: true