Reworked docker image and created a helm chart.

Author: ludomikula

deploy/docker/Dockerfile

@@ -0,0 +1,51 @@
+FROM maven:3.8.4-openjdk-17-slim AS build-server
+COPY ./server /openblocks-server
+WORKDIR /openblocks-server
+RUN --mount=type=cache,target=/root/.m2 mvn -f pom.xml clean package -DskipTests
+
+FROM openjdk:17-slim AS jre-build
+RUN jlink --add-modules java.base,java.compiler,java.datatransfer,java.desktop,java.instrument,java.logging,java.management,java.management.rmi,java.naming,java.net.http,java.prefs,java.rmi,java.scripting,java.se,java.security.jgss,java.security.sasl,java.smartcardio,java.sql,java.sql.rowset,java.transaction.xa,java.xml,java.xml.crypto,jdk.accessibility,jdk.charsets,jdk.crypto.cryptoki,jdk.crypto.ec,jdk.dynalink,jdk.httpserver,jdk.incubator.foreign,jdk.incubator.vector,jdk.internal.vm.ci,jdk.jdwp.agent,jdk.jfr,jdk.jsobject,jdk.localedata,jdk.management,jdk.management.agent,jdk.management.jfr,jdk.naming.dns,jdk.naming.rmi,jdk.net,jdk.nio.mapmode,jdk.sctp,jdk.security.auth,jdk.security.jgss,jdk.unsupported,jdk.xml.dom,jdk.zipfs,jdk.attach \
+          --output /build/jre \
+          --no-man-pages \
+          --no-header-files \
+          --compress=2
+
+FROM ubuntu:20.04
+LABEL maintainer="openblocks"
+
+RUN apt-get update && DEBIAN_FRONTEND=noninteractive && \
+    apt-get install --no-install-recommends -y \
+    gosu \
+    mongo-tools \
+ && rm -rf /var/lib/apt/lists/*
+
+# Define openblocks main jar and plugin jars
+ARG JAR_FILE=/openblocks-server/openblocks-server/target/openblocks-server-1.0-SNAPSHOT.jar
+ARG PLUGIN_JARS=/openblocks-server/openblocks-plugins/*/target/*.jar
+
+# Create required folder structure
+RUN mkdir -p /openblocks /openblocks/plugins /openblocks/config /openblocks/logs && \
+    ln -s /dev/null /openblocks/logs/main.log && \
+    ln -s /dev/null /openblocks/logs/query-error.log
+
+# Copy Java runtime for running server
+COPY --from=jre-build /build/jre /openblocks/jre
+
+# Copy openblocks server application and plugins
+COPY --from=build-server ${JAR_FILE} /openblocks/server.jar
+COPY --from=build-server ${PLUGIN_JARS} /openblocks/plugins/
+
+# Copy openblocks server configuration
+COPY ./server/openblocks-server/src/main/resources/selfhost/ce/application.yml /openblocks/config/
+COPY ./server/openblocks-server/src/main/resources/selfhost/ce/application-selfhost.yml /openblocks/config/
+
+# Add bootstrapfile
+COPY ./deploy/docker/backend/entrypoint.sh /entrypoint.sh
+RUN chmod +x /entrypoint.sh && \
+    chmod g+rx,o+rx -R /openblocks/ && \
+    chmod 777 /openblocks/logs/main.log && \
+    chmod 777 /openblocks/logs/query-error.log
+
+WORKDIR /openblocks
+ENTRYPOINT [ "sh" , "/entrypoint.sh" ]
+

deploy/docker/Dockerfile.backend

@@ -0,0 +1,28 @@
+FROM node:slim AS build-client
+COPY ./client /openblocks-client
+WORKDIR /openblocks-client
+RUN yarn --immutable
+
+ARG REACT_APP_COMMIT_ID=test
+ARG REACT_APP_ENV=production
+ARG REACT_APP_EDITION=community
+RUN PUBLIC_URL="." yarn build
+
+FROM nginx:alpine-slim
+LABEL maintainer="openblocks"
+
+# Install shadow package to be able to change nginx user and group id
+RUN apk add --no-cache \
+      shadow
+
+# Copy openblocks client data
+COPY --chown=nginx:nginx --from=build-client /openblocks-client/packages/openblocks/build/ /openblocks-client
+
+# Copy additional nginx init scripts
+COPY ./deploy/docker/frontend/00-change-nginx-user.sh /docker-entrypoint.d/00-change-nginx-user.sh
+COPY ./deploy/docker/frontend/01-update-nginx-conf.sh /docker-entrypoint.d/01-update-nginx-conf.sh
+
+RUN chmod +x /docker-entrypoint.d/00-change-nginx-user.sh && \
+    chmod +x /docker-entrypoint.d/01-update-nginx-conf.sh
+
+COPY ./deploy/docker/frontend/nginx.conf /etc/nginx/nginx.conf

deploy/docker/Dockerfile.frontend

@@ -0,0 +1,35 @@
+#!/bin/bash
+
+set -e
+
+USER_ID=${UID:-9001}
+GROUP_ID=${GID:-9001}
+GROUP_NAME="openblocks_${GROUP_ID}"
+USER_NAME="openblocks_${USER_ID}"
+
+groupadd -g $GROUP_ID $GROUP_NAME || true
+useradd -u $USER_ID -g $GROUP_ID $USER_NAME || true
+
+APP_JAR="${APP_JAR:-/openblocks/server.jar}"
+JAVA_HOME=/openblocks/jre
+JAVA_OPTS="${JAVA_OPTS:-}"
+CUSTOM_APP_PROPERTIES="${APP_PROPERTIES}"
+CONTEXT_PATH=${CONTEXT_PATH:-/}
+
+echo
+echo "Running openblocks server with:"
+echo "    user id: ${USER_ID}"
+echo "   group id: ${GROUP_ID}"
+echo "  base path: ${CONTEXT_PATH}"
+echo
+${JAVA_HOME}/bin/java -version
+echo
+
+exec gosu ${USER_ID}:${GROUP_ID} ${JAVA_HOME}/bin/java \
+  -Djava.security.egd=file:/dev/./urandom \
+  -Dhttps.protocols=TLSv1.1,TLSv1.2 \
+  -Dlog4j2.formatMsgNoLookups=true \
+  -Dspring.config.location="file:///openblocks/config/application.yml,file:///openblocks/config/application-selfhost.yml" \
+  ${JAVA_OPTS} \
+  -jar "${APP_JAR}" --spring.webflux.base-path=${CONTEXT_PATH} ${CUSTOM_APP_PROPERTIES}
+

deploy/docker/backend/entrypoint.sh

@@ -0,0 +1,54 @@
+version: "3"
+services:
+
+
+  mongodb:
+    image: "mongo:4.4"
+    container_name: mongodb
+    environment:
+      MONGO_INITDB_DATABASE: openblocks
+      MONGO_INITDB_ROOT_USERNAME: openblocks
+      MONGO_INITDB_ROOT_PASSWORD: secret123
+    # Uncomment to save database data into local 'mongodata' folder
+    # volumes:
+    #   - ./mogodata:/data/db
+    restart: unless-stopped
+
+  redis:
+    image: redis:7-alpine
+    container_name: redis
+
+  openblocks-backend:
+    image: openblocksdev/openblocks-ce-backend
+    container_name: openblocks-backend
+    # Enabled ports to be able to access backend from host
+    #    ports:
+    #  - "3080:8080"
+    environment:
+      UID: "9001"
+      GID: "9001"
+      #CONTEXT_PATH: "/"
+      MONGODB_URI: "mongodb://openblocks:secret123@mongodb/openblocks?authSource=admin"
+      REDIS_URL: "redis://redis:6379"
+      ENCRYPTION_PASSWORD: "openblocks.dev"
+      ENCRYPTION_SALT: "openblocks.dev"
+      CORS_ALLOWED_DOMAINS: "*"
+    restart: unless-stopped
+    depends_on:
+      - mongodb
+      - redis
+
+  openblocks-frontend:
+    image: openblocksdev/openblocks-ce-frontend
+    container_name: openblocks-frontend
+    ports:
+      - "3000:3000"
+    environment:
+      UID: "9001"
+      GID: "9001"
+      #CONTEXT_PATH: "/"
+      OPENBLOCKS_SERVER_URL: "http://openblocks-backend:8080"
+    restart: unless-stopped
+    depends_on:
+      - openblocks-backend
+

deploy/docker/docker-compose.yaml

@@ -0,0 +1,9 @@
+#!/bin/sh
+
+USER_ID=${UID:-9001}
+GROUP_ID=${GID:-9001}
+
+usermod -u ${USER_ID} nginx || true
+groupmod -g ${GROUP_ID} nginx || true
+
+echo "nginx user and group id modified."

deploy/docker/entrypoint.sh

@@ -0,0 +1,13 @@
+#!/bin/sh
+
+# remove trailing slash(es)
+CONTEXT_PATH=$(echo "${CONTEXT_PATH:-}" | sed 's@/*$@@')
+ROOT_PATH="${CONTEXT_PATH}"
+if [ -z "${CONTEXT_PATH}" ]; then
+    ROOT_PATH="/"
+fi;
+
+sed -i "s@__CONTEXT_PATH__ {@${ROOT_PATH} {@" /etc/nginx/nginx.conf
+sed -i "s@__CONTEXT_PATH__@${CONTEXT_PATH}@" /etc/nginx/nginx.conf
+sed -i "s@__OPENBLOCKS_SERVER_URL__@${OPENBLOCKS_SERVER_URL:-http://localhost:3000}@" /etc/nginx/nginx.conf
+