feat(pages): add Dockerfile for server hosting

.github/workflows/pages-ci.yml

@@ -81,3 +81,24 @@ jobs:
       - name: Check bundle size
         working-directory: pages
         run: npm run size
+
+  check-container:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Trust workspace
+        run: git config --global --replace-all safe.directory '*'
+
+      - name: Setup Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Debug Docker Info
+        run: docker info
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v7
+        with:
+            context: pages/
+            push: false

pages/.dockerignore

@@ -0,0 +1,6 @@
+node_modules
+dist
+.git
+*.md
+!README.md
+.DS_Store

pages/Dockerfile

@@ -0,0 +1,20 @@
+FROM node:22-alpine AS build
+LABEL org.opencontainers.image.source=https://github.com/alibaba/open-code-review
+
+WORKDIR /app
+
+COPY package.json package-lock.json ./
+RUN npm ci
+
+COPY . .
+RUN npm run build
+
+FROM nginx:1.27-alpine
+
+COPY nginx.conf /etc/nginx/conf.d/default.conf
+
+COPY --from=build /app/dist /usr/share/nginx/html
+
+EXPOSE 80
+
+CMD ["nginx", "-g", "daemon off;"]

pages/nginx.conf

@@ -0,0 +1,31 @@
+server {
+    listen       80;
+    server_name  localhost;
+
+    root   /usr/share/nginx/html;
+    index  index.html;
+
+    # Security headers
+    add_header X-Frame-Options "SAMEORIGIN" always;
+    add_header X-Content-Type-Options "nosniff" always;
+    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
+
+    location / {
+        location ~ \.html$ {
+            add_header Cache-Control "no-cache, no-store, must-revalidate";
+            try_files $uri /index.html;
+        }
+
+        location ~ \.(js|css|woff2?|svg|png|jpg|jpeg|gif|ico)$ {
+            add_header Cache-Control "public, max-age=31536000, immutable";
+            try_files $uri =404;
+        }
+
+        try_files $uri /index.html;
+    }
+
+    # Gzip compression
+    gzip on;
+    gzip_types text/html text/css application/javascript application/json image/svg+xml;
+    gzip_min_length 256;
+}