opensubs.io/Dockerfile at master · joaquimadraz/opensubs.io · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
# Alias this container as builder:
FROM bitwalker/alpine-elixir-phoenix as builder

# Install aws cli and yarn
RUN apk --no-cache update && \
    apk --no-cache add python py-pip py-setuptools ca-certificates groff less && \
    pip --no-cache-dir install awscli && \
    apk --no-cache add yarn && \
    rm -rf /var/cache/apk/*

ARG HOST
ARG ERLANG_COOKIE
ARG ROLLBAR_ACCESS_TOKEN
ARG SENDGRID_API_KEY
ARG SUBS_ADMIN_EMAIL
ARG PHOENIX_SECRET_KEY_BASE
ARG SESSION_COOKIE_NAME
ARG SESSION_COOKIE_SIGNING_SALT
ARG SESSION_COOKIE_ENCRYPTION_SALT
ARG GUARDIAN_SECRET_KEY
ARG AWS_ACCESS_KEY_ID
ARG AWS_SECRET_ACCESS_KEY
ARG AWS_DEFAULT_REGION
ARG OPENSUBS_S3_SECRETS_BUCKET
ARG DATABASE_URL

ENV MIX_ENV=prod \
    SUBS_WEB_KEYKEY=/etc/letsencrypt/live/$HOST/privkey.pem \
    SUBS_WEB_CERTFILE=/etc/letsencrypt/live/$HOST/cert.pem \
    SUBS_WEB_CACERTFILE=/etc/letsencrypt/live/$HOST/chain.pem \
    HOST=$HOST \
    ERLANG_COOKIE=$ERLANG_COOKIE \
    ROLLBAR_ACCESS_TOKEN=$ROLLBAR_ACCESS_TOKEN \
    SENDGRID_API_KEY=$SENDGRID_API_KEY \
    SUBS_ADMIN_EMAIL=$SUBS_ADMIN_EMAIL \
    PHOENIX_SECRET_KEY_BASE=$PHOENIX_SECRET_KEY_BASE \
    SESSION_COOKIE_NAME=$SESSION_COOKIE_NAME \
    SESSION_COOKIE_SIGNING_SALT=$SESSION_COOKIE_SIGNING_SALT \
    SESSION_COOKIE_ENCRYPTION_SALT=$SESSION_COOKIE_ENCRYPTION_SALT \
    GUARDIAN_SECRET_KEY=$GUARDIAN_SECRET_KEY \
    AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID \
    AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY \
    AWS_DEFAULT_REGION=$AWS_DEFAULT_REGION \
    OPENSUBS_S3_SECRETS_BUCKET=$OPENSUBS_S3_SECRETS_BUCKET \
    DATABASE_URL=$DATABASE_URL

WORKDIR /subs

# Copy ssl files into builder container tmp folder
RUN mkdir tmp
RUN aws s3 sync s3://$OPENSUBS_S3_SECRETS_BUCKET/ssl tmp

# Umbrella
COPY mix.exs mix.lock ./
COPY config config
COPY services.json services.json

# Apps
COPY apps apps
RUN mix do deps.get, deps.compile
RUN cd deps/comeonin && make clean && make

# Build assets in production mode:
WORKDIR /subs/apps/subs_web/frontend
RUN yarn install && yarn build

WORKDIR /subs/apps/subs_web
RUN mix phx.digest

WORKDIR /subs
COPY rel rel

RUN mix release --env=prod --verbose
RUN cp services.json ./rel/releases/subs_web/services.json

### Release

FROM alpine:3.6

ARG HOST

# We need bash and openssl for Phoenix
RUN apk upgrade --no-cache && \
    apk add --no-cache bash openssl

ENV MIX_ENV=prod \
    REPLACE_OS_VARS=true \
    SHELL=/bin/bash

# Dir where phoenix is looking for cert files. Default for letsencrypt
WORKDIR /etc/letsencrypt/live/$HOST

COPY --from=builder /subs/tmp .

WORKDIR /subs

COPY --from=builder /subs/rel/releases .

CMD ["subs_web/bin/subs", "foreground"]