Production deploy

.docker/bin/check-versions.sh

@@ -0,0 +1,7 @@
+#!/bin/sh
+
+echo "NODE Version: $(node --version) (should be: $(node -p "require('./package.json').engines.node"))"
+echo "NPM Version: $(npm --version)"
+echo "Yarn Version: $(yarn --version) (should be: $(node -p "require('./package.json').engines.yarn"))"
+echo "Ruby Version: $(ruby --version) (should be: $(cat .ruby-version))"
+echo "Bundler Version: $(bundler --version) (should be: $(awk '/BUNDLED WITH/{getline; print}' Gemfile.lock))"

.docker/bin/make-buildpacks-test-file.sh

@@ -0,0 +1,2 @@
+(cat app.json || echo '{}') | jq -r '.environments.test.buildpacks[].url' >.buildpacks &&
+  (test -s .buildpacks || rm .buildpacks)

.docker/dev-docker-entrypoint-migrate.sh

@@ -0,0 +1,11 @@
+#!/bin/sh
+# https://stackoverflow.com/a/38732187/1935918
+set -e
+
+if [ -f ./tmp/pids/server.pid ]; then
+  rm ./tmp/pids/server.pid
+fi
+
+bin/bundle exec rake db:migrate
+
+exec bin/bundle exec "$@"

.docker/dev-docker-entrypoint.sh

@@ -0,0 +1,8 @@
+#!/bin/sh
+set -e
+
+if [ -f ./tmp/pids/server.pid ]; then
+  rm ./tmp/pids/server.pid
+fi
+
+exec bin/bundle exec "$@"

.docker/docker-entrypoint-migrate.sh

@@ -0,0 +1,15 @@
+#!/bin/sh
+# https://stackoverflow.com/a/38732187/1935918
+set -e
+
+/bin/herokuish procfile exec bin/bundle exec rake db:migrate
+
+# not sure this is needed on this image
+# if [ -f /app/tmp/pids/server.pid ]; then
+#   rm /app/tmp/pids/server.pid
+# fi
+
+# put things sort of back to default
+# default entrypoint is /start
+# pass cmd to /start
+exec /start "$@"

.docker/docker-entrypoint.sh

@@ -0,0 +1,14 @@
+#!/bin/sh
+# https://stackoverflow.com/a/38732187/1935918
+set -e
+
+# not sure this is needed on this image
+# if [ -f /app/tmp/pids/server.pid ]; then
+#   rm /app/tmp/pids/server.pid
+# fi
+
+# put things sort of back to default
+# default entrypoint is /start
+# pass cmd to /start (commands are defined in Proc file)
+# set entrypoint to /exec to run custom commands
+exec /start "$@"

.docker/images/dev-base/Dockerfile

@@ -0,0 +1,99 @@
+# Because we want to be as close to the 'production' environment as possible when developing/running tests we base our dev environment on the heroku stack.
+# Currently heroku-20 is based on ubuntu 20.04 which doesn't have the ruby version we need in the package manager so we need to build a base image first
+# we only do this once and then we can use the image for development and testing purposes.
+# ideally in the future when we're no longer using 3.0.3 this wont be necessary
+
+# If you need to leave the container running for example to debug something switch out the init command with 
+# CMD ["tail", "-f", "/dev/null"]
+
+# if your using these values anywhere new see https://docs.docker.com/engine/reference/builder/#understand-how-arg-and-from-interact
+
+ARG HEROKU_STACK=20
+ARG YARN_VERSION=1.22.19
+ARG NODE_VERSION=20.9.0
+ARG RUBY_VERSION=3.0.3
+ARG BUNDLER_VERSION=2.3.25
+
+# ----------------------------------------------------------------
+# using heroku as our base since we run the production apps on heroku
+FROM heroku/heroku:$HEROKU_STACK
+
+ARG NODE_VERSION
+ARG RUBY_VERSION
+ARG BUNDLER_VERSION
+
+# make this stage non-interactive
+ENV DEBIAN_FRONTEND=noninteractive
+
+# updates
+RUN apt-get update --error-on=any
+
+
+# install dependencies for node install
+RUN apt-get install -y \
+  ca-certificates \
+  curl
+
+
+# install dependencies for ruby install
+RUN apt-get install -y autoconf \
+  patch \
+  build-essential \
+  rustc \
+  libssl-dev \
+  libyaml-dev \
+  libreadline6-dev \
+  zlib1g-dev \
+  libgmp-dev \
+  libncurses5-dev \
+  libffi-dev \
+  libgdbm6 \
+  libgdbm-dev \
+  libdb-dev \
+  uuid-dev 
+
+# -------------
+# install node
+# -------------
+
+# install specific node version from prepackaged binaries
+ARG NODE_PACKAGE=node-v$NODE_VERSION-linux-x64
+ARG NODE_HOME=/opt/$NODE_PACKAGE
+ENV NODE_PATH $NODE_HOME/lib/node_modules
+ENV PATH $NODE_HOME/bin:$PATH
+RUN curl https://nodejs.org/dist/v$NODE_VERSION/$NODE_PACKAGE.tar.gz | tar -xzC /opt/
+# enable yarn
+RUN corepack enable
+
+# -------------
+# install ruby & bundler version
+# -------------
+
+# Create a non-root user
+RUN useradd -m outpost-user
+
+# Switch to the new user
+USER outpost-user
+
+# ubuntu ruby-build package is too old to get the version we need so we're adding it here
+RUN git clone https://github.com/rbenv/rbenv.git ~/.rbenv && \
+  echo 'export PATH="$HOME/.rbenv/bin:$HOME/.rbenv/shims:$PATH"' >> ~/.bashrc && \
+  echo 'eval "$(rbenv init -)"' >> ~/.bashrc && \
+  git clone https://github.com/rbenv/ruby-build.git ~/.rbenv/plugins/ruby-build
+
+
+# $HOME is set in the shell but not in docker
+ENV HOME /home/outpost-user
+ENV PATH $HOME/.rbenv/bin:$HOME/.rbenv/shims:$PATH
+
+RUN rbenv install $RUBY_VERSION 
+RUN rbenv global $RUBY_VERSION
+
+# install bundler 
+RUN gem install bundler:$BUNDLER_VERSION
+
+# after this point we don't need to be non-interactive anymore since we'll be running the container
+ENV DEBIAN_FRONTEND=
+
+
+# CMD ["tail", "-f", "/dev/null"]

.docker/services/mongo/mongo.yml

@@ -0,0 +1,20 @@
+version: "3.7"
+services:
+  mongo:
+    image: mongo:6
+    ports:
+      - 27018:27017
+    volumes:
+      - mongo-volume:/data/db
+      - ./setup-mongodb.js:/docker-entrypoint-initdb.d/mongo-init.js:ro
+    environment:
+      MONGO_INITDB_ROOT_USERNAME: ${MONGO_INITDB_ROOT_USERNAME:-admin}
+      MONGO_INITDB_ROOT_PASSWORD: ${MONGO_INITDB_ROOT_PASSWORD:-password}
+      MONGO_INITDB_USERNAME: ${MONGO_INITDB_USERNAME:-outpost}
+      MONGO_INITDB_PASSWORD: ${MONGO_INITDB_PASSWORD:-password}
+      MONGO_INITDB_DATABASE: ${MONGO_INITDB_DATABASE:-outpost_api_development}
+    networks:
+      - internal_network
+
+volumes:
+  mongo-volume:

.docker/services/mongo/setup-mongodb.js

@@ -0,0 +1,35 @@
+db = db.getSiblingDB(
+  process.env.MONGO_INITDB_DATABASE || "outpost_api_development"
+);
+
+db.createUser({
+  user: process.env.MONGO_INITDB_USERNAME || "outpost",
+  pwd: process.env.MONGO_INITDB_PASSWORD || "password",
+  roles: [
+    {
+      role: "readWrite",
+      db: process.env.MONGO_INITDB_DATABASE || "outpost_api_development",
+    },
+  ],
+});
+
+db.createCollection("indexed_services");
+
+db.indexed_services.createIndex(
+  {
+    name: "text",
+    description: "text",
+  },
+  {
+    weights: {
+      name: 5,
+      description: 1,
+    },
+  }
+);
+db.indexed_services.createIndex({
+  "locations.geometry": "2dsphere",
+});
+db.indexed_services.createIndex({
+  "taxonomies.slug": 1,
+});

.docker/services/outpost-api-service/outpost-api-service.yml

@@ -0,0 +1,14 @@
+version: "3.7"
+services:
+  outpost-api-service:
+    image: ghcr.io/wearefuturegov/outpost-api-service:latest
+    container_name: outpost-api-service
+    environment:
+      NODE_ENV: development
+      FORCE_SSL: false
+      DB_URI: mongodb://${MONGO_INITDB_ROOT_USERNAME:-outpost}:${MONGO_INITDB_ROOT_PASSWORD:-password}@mongo/${MONGO_INITDB_DATABASE:-outpost_api_development}?retryWrites=true&w=majority
+    ports:
+      - 3001:3001
+    networks:
+      - internal_network
+      - external_network

.docker/services/postgres/postgres.yml

@@ -0,0 +1,17 @@
+version: "3.7"
+services:
+  postgres:
+    image: postgres:13.7-alpine
+    environment:
+      POSTGRES_USER: ${POSTGRES_USER:-outpost}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-password}
+      POSTGRES_DB: ${POSTGRES_DB:-outpost_development}
+    ports:
+      - 5433:5432
+    volumes:
+      - postgres-volume:/var/lib/postgresql/data
+    networks:
+      - internal_network
+
+volumes:
+  postgres-volume:

.dockerignore

@@ -0,0 +1,62 @@
+# git
+.git
+.gitattributes
+.gitignore
+.github
+
+# bundler
+.bundle
+vendor/bundle
+
+# env
+.env
+.env.*
+
+# node
+node_modules
+
+# misc
+.DS_Store
+*.swp
+*~
+
+# Ignore precompiled javascript packs
+public/packs
+public/packs-test
+public/assets
+public/system
+
+# Comment out this rule if you are OK with secrets being uploaded to the image
+config/initializers/secret_token.rb
+config/master.key
+
+# Only include if you have production secrets in this file, which is no longer a Rails default
+config/secrets.yml
+lib/seeds/*
+
+# Added in case image is built locally without fresh checkout
+.idea
+.vscode
+.ruby-lsp
+
+tmp/*
+
+# logs
+log/*
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+.yarn-integrity
+
+# Ignore uploaded files in development
+/storage/*
+!/storage/.keep
+
+# Ignore Byebug command history file.
+.byebug_history
+
+coverage
+spec/tmp
+
+.buildpacks