📄 Add license for new script

With an entrypoint script, fill the configuration template from an
environment variable containing the KI API URL.

.drone.yml

@@ -4,40 +4,103 @@
 # SPDX-License-Identifier: AGPL-3.0-or-later
 kind: pipeline
 type: docker
-name: default
+name: qa
+
+trigger:
+  event:
+    - push
+    - pull_request
+  branch:
+    - main
 
 steps:
-- name: reuse
+  - name: reuse
-  image: fsfe/reuse:latest
+    image: fsfe/reuse
+  - name: lint
+    image: node:20
+    commands:
+      - npm ci
+      - npm run lint
 
-- name: docker-publish
+---
-  image: plugins/docker
+kind: pipeline
-  settings:
+type: docker
-    registry: registry.wtf-eg.net
+name: build
-    repo: registry.wtf-eg.net/ki-frontend
-    target: ki-frontend
-    auto_tag: true
-    username:
-      from_secret: "docker_username"
-    password:
-      from_secret: "docker_password"
-  when:
-    event:
-      - push
-    branch:
-      - main
 
-- name: docker-publish-tag
+trigger:
-  image: plugins/docker
+  event:
-  settings:
+    - push
-    registry: registry.wtf-eg.net
+  branch:
-    repo: registry.wtf-eg.net/ki-frontend
+    - main
-    target: ki-frontend
+
-    auto_tag: true
+depends_on:
-    username:
+  - qa
-      from_secret: "docker_username"
+
-    password:
+steps:
-      from_secret: "docker_password"
+  - name: docker-publish
-  when:
+    image: plugins/docker
-    event:
+    settings:
-      - tag
+      registry: git.wtf-eg.de
+      repo: git.wtf-eg.de/kompetenzinventar/frontend
+      target: ki-frontend
+      auto_tag: true
+      username:
+        from_secret: "docker_username"
+      password:
+        from_secret: "docker_password"
+
+---
+kind: pipeline
+type: docker
+name: deploy
+
+trigger:
+  event:
+    - push
+  branch:
+    - main
+
+depends_on:
+  - build
+
+steps:
+  - name: deploy-dev
+    image: appleboy/drone-ssh
+    settings:
+      host:
+        - dev01.wtf-eg.net
+      username: drone_deployment
+      key:
+        from_secret: "dev01_deployment_key"
+      command_timeout: 2m
+      script:
+        - echo "Executing forced command..."
+
+---
+kind: pipeline
+type: docker
+name: tag-release
+
+trigger:
+  event:
+    - tag
+
+steps:
+  - name: reuse
+    image: fsfe/reuse
+  - name: lint
+    image: node:20
+    commands:
+      - npm ci
+      - npm run lint
+  - name: docker-publish
+    image: plugins/docker
+    settings:
+      registry: git.wtf-eg.de
+      repo: git.wtf-eg.de/kompetenzinventar/frontend
+      target: ki-frontend
+      auto_tag: true
+      username:
+        from_secret: "docker_username"
+      password:
+        from_secret: "docker_password"

Dockerfile

@@ -18,3 +18,11 @@ LABEL org.opencontainers.image.source=https://git.wtf-eg.de/kompetenzinventar/ki
 LABEL org.opencontainers.image.url=https://git.wtf-eg.de/kompetenzinventar/ki-frontend
 LABEL org.opencontainers.image.documentation=https://git.wtf-eg.de/kompetenzinventar/ki-frontend#docker
 LABEL org.opencontainers.image.vendor="WTF Kooperative eG"
+
+ENV KI_API_URL http://ki-backend:5000
+
+WORKDIR /usr/share/nginx/html
+
+COPY etc/nginx/conf.d/default.conf /etc/nginx/conf.d/default.conf
+COPY configure.sh /docker-entrypoint.d/
+COPY --from=builder /dist .

configure.sh

@@ -0,0 +1,13 @@
+#!/bin/bash
+# SPDX-FileCopyrightText: WTF Kooperative eG <https://wtf-eg.de/>
+#
+# SPDX-License-Identifier: AGPL-3.0-or-later
+
+set -o errexit
+set +x
+
+: ${KI_API_URL:=http://ki-backend:5000}
+
+sed -e "s%\$KI_API_URL%$KI_API_URL%g" /usr/share/nginx/html/config.js.in > /usr/share/nginx/html/config.js
+
+exec "$@"

etc/nginx/conf.d/default.conf

@@ -9,10 +9,24 @@ server {
 
     #access_log  /var/log/nginx/host.access.log  main;
 
+    root   /usr/share/nginx/html;
+
+    # routes without dots serve the index.html without caching
     location / {
-        root   /usr/share/nginx/html;
+        add_header Cache-Control "no-cache";
-        index  index.html index.htm;
+        try_files $uri $uri/index.html /index.html;
-        try_files $uri $uri/ /index.html;
+    }
+  
+    # static js and css files that get replaced instead of updated
+    location ~ \.(js|css) {
+        add_header Cache-Control "public, max-age=31536000, immutable";
+        try_files $uri =404;
+    }
+  
+    # cache other static files for 30 days
+    location ~ \.(?!html) {
+        add_header Cache-Control "public, max-age=2592000";
+        try_files $uri =404;
     }
 
     #error_page  404              /404.html;

public/config.js.in

@@ -0,0 +1,7 @@
+// SPDX-FileCopyrightText: WTF Kooperative eG <https://wtf-eg.de/>
+//
+// SPDX-License-Identifier: AGPL-3.0-or-later
+
+window.ki = {
+  apiUrl: "$KI_API_URL"
+}