Merge pull request #15 from pantanal-labs/docker

Add Docker

Author: rogerpinho

.dockerignore

@@ -0,0 +1,18 @@
+.dockerignore
+# there are valid reasons to keep the .git, namely so that you can get the
+# current commit hash
+#.git
+.log
+tmp
+
+# Mix artifacts
+_build
+deps
+*.ez
+releases
+
+# Generate on crash by the VM
+erl_crash.dump
+
+# Static artifacts
+node_modules

.gitignore

@@ -1,7 +1,7 @@
 # The directory Mix will write compiled artifacts to.
-/_build/
-/.elixir_ls
-
+/_build/ 
+/.elixir_ls 
+.env
 # If you run "mix test --cover", coverage assets end up here.
 /cover/
 
@@ -29,7 +29,7 @@ npm-debug.log
 # The directory NPM downloads your dependencies sources to.
 /assets/node_modules/
 
-# Since we are building assets from assets/,
-# we ignore priv/static. You may want to comment
-# this depending on your deployment strategy.
+# Since we are building assets from assets/, 
+# we ignore priv/static. You may want to comment this depending on your deployment 
+# strategy.
 /priv/static/

Caddyfile

@@ -0,0 +1,4 @@
+brasilemdados.com {
+	reverse_proxy 127.0.0.1:4000
+	tls rogervezaro1997@gmail.com
+}

Dockerfile

@@ -0,0 +1,59 @@
+
+# Step 1 - hex dependencies
+#
+FROM hexpm/elixir:1.13.2-erlang-24.2.1-alpine-3.15.0 AS otp-dependencies
+
+WORKDIR /app
+
+ENV MIX_ENV="prod"
+
+# Install Alpine dependencies
+RUN apk add --no-cache git && \
+    apk  --no-cache add build-base
+
+# Install Erlang dependencies
+RUN mix local.rebar --force && \
+    mix local.hex --force
+
+# Install hex dependencies
+# COPY mix.* ./
+COPY mix.exs mix.lock ./
+RUN mix deps.get --only prod
+RUN mix deps.compile
+
+# Compile codebase
+COPY config config
+COPY lib lib
+
+
+# Compile assets
+COPY priv priv
+COPY assets assets
+
+RUN mix assets.deploy
+
+RUN mix compile
+# Build OTP release
+COPY rel rel
+RUN mix release
+
+#
+# Step 2 - build a lean runtime container
+#
+FROM alpine:3.15.0
+
+# Install Alpine dependencies
+RUN apk update --no-cache && \
+    apk upgrade --no-cache && \
+    apk add --no-cache bash openssl libgcc libstdc++ ncurses-libs
+
+WORKDIR /app
+
+RUN chown nobody /app
+
+# Only copy the final release from the build stage
+COPY --from=otp-dependencies --chown=nobody:root /app/_build/prod/rel/brasil_em_dados ./
+
+USER nobody
+
+CMD /app/bin/server

config/config.exs

@@ -5,7 +5,7 @@
 # is restricted to this project.
 
 # General application configuration
-use Mix.Config
+import Config
 
 config :brasil_em_dados,
   ecto_repos: [BrasilEmDados.Repo]
@@ -36,7 +36,7 @@ config :esbuild,
   ]
 
 config :tailwind,
-  version: "3.0.10",
+  version: "3.0.12",
   default: [
     args: ~w(
       --config=tailwind.config.js

config/dev.exs

@@ -1,4 +1,4 @@
-use Mix.Config
+import  Config
 
 # Configure your database
 config :brasil_em_dados, BrasilEmDados.Repo,

config/prod.exs

@@ -1,4 +1,4 @@
-use Mix.Config
+import Config
 
 # For production, don't forget to configure the url host
 # to something meaningful, Phoenix uses this information
@@ -10,7 +10,6 @@ use Mix.Config
 # which you should run after static files are built and
 # before starting your production server.
 config :brasil_em_dados, BrasilEmDadosWeb.Endpoint,
-  url: [host: "example.com", port: 80],
   cache_static_manifest: "priv/static/cache_manifest.json"
 
 # Do not print debug messages in production
@@ -48,8 +47,4 @@ config :logger, level: :info
 #     config :brasil_em_dados, BrasilEmDadosWeb.Endpoint,
 #       force_ssl: [hsts: true]
 #
-# Check `Plug.SSL` for all available options in `force_ssl`.
-
-# Finally import the config/prod.secret.exs which loads secrets
-# and configuration from environment variables.
-import_config "prod.secret.exs"
+# Check `Plug.SSL` for all available options in `force_ssl`. 

config/prod.secret.exs

@@ -0,0 +1,85 @@
+import Config
+
+# config/runtime.exs is executed for all environments, including
+# during releases. It is executed after compilation and before the
+# system starts, so it is typically used to load production configuration
+# and secrets from environment variables or elsewhere. Do not define
+# any compile-time configuration in here, as it won't be applied.
+# The block below contains prod specific runtime configuration.
+
+# Start the phoenix server if environment is set and running in a release
+if System.get_env("PHX_SERVER") && System.get_env("RELEASE_NAME") do
+  config :brasil_em_dados, BrasilEmDadosWeb.Endpoint, server: true
+end
+
+if config_env() == :prod do
+  database_url =
+    System.get_env("DATABASE_URL") ||
+      raise """
+      environment variable DATABASE_URL is missing.
+      For example: ecto://USER:PASS@HOST/DATABASE
+      """
+
+  maybe_ipv6 = if System.get_env("ECTO_IPV6"), do: [:inet6], else: []
+
+  config :brasil_em_dados, BrasilEmDados.Repo,
+    # ssl: true,
+    url: database_url,
+    pool_size: String.to_integer(System.get_env("POOL_SIZE") || "10"),
+    socket_options: maybe_ipv6
+    # show_sensitive_data_on_connection_error: true  # The secret key base is used to sign/encrypt cookies and other secrets.
+  # A default value is used in config/dev.exs and config/test.exs but you
+  # want to use a different value for prod and you most likely don't want
+  # to check this value into version control, so we use an environment
+  # variable instead.
+  secret_key_base =
+    System.get_env("SECRET_KEY_BASE") ||
+      raise """
+      environment variable SECRET_KEY_BASE is missing.
+      You can generate one by calling: mix phx.gen.secret
+      """
+
+  host = System.get_env("PHX_HOST") || "brasilemdados.com"
+  port = String.to_integer(System.get_env("PORT") || "4000")
+
+  config :brasil_em_dados, BrasilEmDadosWeb.Endpoint,
+    url: [host: host, port: 443],
+    http: [
+      # Enable IPv6 and bind on all interfaces.
+      # Set it to  {0, 0, 0, 0, 0, 0, 0, 1} for local network only access.
+      # See the documentation on https://hexdocs.pm/plug_cowboy/Plug.Cowboy.html
+      # for details about using IPv6 vs IPv4 and loopback vs public addresses.
+      ip: {0, 0, 0, 0, 0, 0, 0, 0},
+      port: port
+    ],
+    secret_key_base: secret_key_base,
+    check_origin: false
+
+  # ## Using releases
+  #
+  # If you are doing OTP releases, you need to instruct Phoenix
+  # to start each relevant endpoint:
+  #
+  # config :brasil_em_dados, BrasilEmDadosWeb.Endpoint, server: true
+  #
+  # Then you can assemble a release by calling `mix release`.
+  # See `mix help release` for more information.
+
+  # ## Configuring the mailer
+  #
+  # In production you need to configure the mailer to use a different adapter.
+  # Also, you may need to configure the Swoosh API client of your choice if you
+  # are not using SMTP. Here is an example of the configuration:
+  #
+  #     config :brasil_em_dados, BrasilEmDados.Mailer,
+  #       adapter: Swoosh.Adapters.Mailgun,
+  #       api_key: System.get_env("MAILGUN_API_KEY"),
+  #       domain: System.get_env("MAILGUN_DOMAIN")
+  #
+  # For this example you need include a HTTP client required by Swoosh API client.
+  # Swoosh supports Hackney and Finch out of the box:
+  #
+  #     config :swoosh, :api_client, Swoosh.ApiClient.Hackney
+  #
+  # See https://hexdocs.pm/swoosh/Swoosh.html#module-installation for details.
+end

config/runtime.exs

@@ -1,4 +1,4 @@
-use Mix.Config
+import Config
 
 # Only in tests, remove the complexity from the password hashing algorithm
 config :bcrypt_elixir, :log_rounds, 1

config/test.exs

@@ -0,0 +1,43 @@
+version: '3.8'
+services: 
+  web:
+    build:
+      context: .
+    env_file: .env    
+    ports:
+      - "4000:4000"
+    environment: 
+      DATABASE_URL: "${DATABASE_URL}"
+      SECRET_KEY_BASE: "${SECRET_KEY_BASE}"
+      PORT: "${PORT}"
+    depends_on:
+      - db
+
+  db:
+    container_name: brasil-em-dados-postgres
+    image: postgres:14.1-alpine
+    env_file: .env    
+    restart: unless-stopped
+    environment:
+      POSTGRES_DB: "${POSTGRES_DB}"
+      POSTGRES_USER: "${POSTGRES_USER}"
+      POSTGRES_PASSWORD: "${POSTGRES_PASSWORD}"
+    ports:
+      - '5432:5432'
+    volumes: 
+      - db:/var/lib/postgresql/data
+  
+  caddy:
+    image: caddy:2.5.0-alpine    
+    restart: unless-stopped
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - $PWD/Caddyfile:/etc/caddy/Caddyfile
+      - caddy_data:/data
+      - caddy_config:/config
+volumes:
+  db: 
+  caddy_data:
+  caddy_config:

docker-compose.yml

@@ -0,0 +1,3 @@
+SECRET_KEY_BASE=
+DATABASE_URL=
+PORT=

example.env

@@ -0,0 +1,28 @@
+defmodule BrasilEmDados.Release do
+  @moduledoc """
+  Used for executing DB release tasks when run in production without Mix
+  installed.
+  """
+  @app :brasil_em_dados
+
+  def migrate do
+    load_app()
+
+    for repo <- repos() do
+      {:ok, _, _} = Ecto.Migrator.with_repo(repo, &Ecto.Migrator.run(&1, :up, all: true))
+    end
+  end
+
+  def rollback(repo, version) do
+    load_app()
+    {:ok, _, _} = Ecto.Migrator.with_repo(repo, &Ecto.Migrator.run(&1, :down, to: version))
+  end
+
+  defp repos do
+    Application.fetch_env!(@app, :ecto_repos)
+  end
+
+  defp load_app do
+    Application.load(@app)
+  end
+end

lib/brasil_em_dados/release.ex

@@ -51,7 +51,7 @@ defmodule BrasilEmDados.MixProject do
       {:plug_cowboy, "~> 2.0"},
       {:earmark, "~> 1.4.14"},
       {:esbuild, "~> 0.4.0", runtime: Mix.env() == :dev},
-      {:tailwind, "~> 0.1.5", runtime: Mix.env() == :dev},
+      {:tailwind, "~> 0.1.5"},
       {:scrivener_ecto, "~> 2.7.0"}
     ]
   end

mix.exs

@@ -0,0 +1,5 @@
+@echo off
+rem Set the release to work across nodes.
+rem RELEASE_DISTRIBUTION must be "sname" (local), "name" (distributed) or "none".
+rem set RELEASE_DISTRIBUTION=name
+rem set RELEASE_NODE=<%= @release.name %>