modulacms/Dockerfile.example at main · hegner123/modulacms · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
# =============================================================================
# ModulaCMS Production Dockerfile
# =============================================================================
# Multi-stage build for minimal, secure production image
#
# Build:
#   docker build -t modula .
#   docker build --build-arg TARGETARCH=arm -t modula:arm .
#
# Run:
#   docker run -d -p 8080:8080 -p 8443:8443 -p 2222:2222 \
#     -v modula-data:/app/data \
#     -v modula-certs:/app/certs \
#     -v modula-ssh:/app/.ssh \
#     modula
# =============================================================================

# -----------------------------------------------------------------------------
# Stage 1: Builder
# -----------------------------------------------------------------------------
FROM golang:1.25-bookworm AS builder

ARG TARGETARCH=amd64
ARG VERSION=dev
ARG COMMIT=unknown
ARG BUILD_DATE=unknown

WORKDIR /app

ENV TERM=xterm-256color

# Install cross-compilers for different architectures
RUN apt-get update && apt-get install -y --no-install-recommends \
    gcc-arm-linux-gnueabihf \
    gcc-aarch64-linux-gnu \
    && rm -rf /var/lib/apt/lists/*

# Cache dependencies
COPY go.mod go.sum ./
RUN go mod download

# Copy source code
COPY . .

# Set build environment
ENV CGO_ENABLED=1
ENV GOOS=linux

# Build based on target architecture
RUN case "${TARGETARCH}" in \
        amd64) \
            export GOARCH=amd64 && \
            export CC=gcc ;; \
        arm64) \
            export GOARCH=arm64 && \
            export CC=aarch64-linux-gnu-gcc ;; \
        arm) \
            export GOARCH=arm && \
            export CC=arm-linux-gnueabihf-gcc ;; \
        *) \
            echo "Unsupported architecture: ${TARGETARCH}" && exit 1 ;; \
    esac && \
    go build -mod vendor \
        -ldflags="-s -w \
            -X 'github.com/hegner123/modulacms/internal/utility.Version=${VERSION}' \
            -X 'github.com/hegner123/modulacms/internal/utility.GitCommit=${COMMIT}' \
            -X 'github.com/hegner123/modulacms/internal/utility.BuildDate=${BUILD_DATE}'" \
        -o modula ./cmd

# -----------------------------------------------------------------------------
# Stage 2: Runtime
# -----------------------------------------------------------------------------
FROM debian:bookworm-slim AS runtime

ENV TERM=xterm-256color

# Labels
LABEL org.opencontainers.image.title="ModulaCMS"
LABEL org.opencontainers.image.description="Headless CMS with HTTP, HTTPS, and SSH servers"
LABEL org.opencontainers.image.source="https://github.com/hegner123/modulacms"
LABEL org.opencontainers.image.licenses="AGPL-3.0"

# Install runtime dependencies
# - ca-certificates: HTTPS/TLS connections
# - tzdata: timezone support
RUN apt-get update && apt-get install -y --no-install-recommends \
    ca-certificates \
    tzdata \
    && rm -rf /var/lib/apt/lists/* \
    && update-ca-certificates

# Create non-root user
RUN groupadd --gid 1000 modula \
    && useradd --uid 1000 --gid modula --shell /bin/false --create-home modula

WORKDIR /app

# Create directories for persistent data
RUN mkdir -p /app/data /app/certs /app/.ssh /app/backups \
    && chown -R modula:modula /app

# Copy binary from builder
COPY --from=builder --chown=modula:modula /app/modula /app/modula

# Switch to non-root user
USER modula

# Expose ports
# 8080  - HTTP
# 8443  - HTTPS
# 2222  - SSH
EXPOSE 8080 8443 2222

# Volumes for persistent data
VOLUME ["/app/data", "/app/certs", "/app/.ssh", "/app/backups"]

# Health check
HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
    CMD ["/app/modula", "--version"]

# Run the application
ENTRYPOINT ["/app/modula"]