Deployment

# Run with port mapping
docker run -d \
  --name greenhouse-admin \
  -p 8080:80 \
  greenhouse-admin:dev

# Access the application
open http://localhost:8080

FROM gradle:8.10-jdk21 AS builder

# Build argument for API URL (passed from CI/CD)
ARG API_BASE_URL
ENV API_BASE_URL=${API_BASE_URL}

# Install libatomic1 for Node.js v25+ (required by Kotlin/WASM)
USER root
RUN apt-get update && apt-get install -y --no-install-recommends \
    libatomic1 \
    && rm -rf /var/lib/apt/lists/*
USER gradle

WORKDIR /app

# Configure memory for JVM/Gradle
ENV GRADLE_OPTS="-Dorg.gradle.jvmargs=-Xmx4g -XX:MaxMetaspaceSize=512m"

# Copy Gradle configuration files first (for better caching)
COPY --chown=gradle:gradle gradle/ gradle/
COPY --chown=gradle:gradle gradlew gradlew.bat settings.gradle.kts build.gradle.kts gradle.properties ./

# Copy the compose app module
COPY --chown=gradle:gradle composeApp/ composeApp/

# Create local.properties with API_BASE_URL
RUN echo "API_BASE_URL=${API_BASE_URL}" > local.properties

# Upgrade Yarn lock files (required after dependency changes)
RUN ./gradlew kotlinUpgradeYarnLock kotlinWasmUpgradeYarnLock --no-daemon

# Build the WASM distribution
RUN ./gradlew :composeApp:wasmJsBrowserDistribution --no-daemon --stacktrace

FROM nginx:alpine

# Install required packages
RUN apk add --no-cache tzdata

# Copy custom nginx configuration
COPY nginx.conf /etc/nginx/nginx.conf

# Copy the built WASM application
COPY --from=builder /app/composeApp/build/dist/wasmJs/productionExecutable/ /usr/share/nginx/html/

# Create health check endpoint
RUN echo "OK" > /usr/share/nginx/html/health

EXPOSE 80

# Health check
HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
    CMD wget --quiet --tries=1 --spider http://localhost/health || exit 1

# Start Nginx
CMD ["nginx", "-g", "daemon off;"]

# WASM headers for SharedArrayBuffer support (required by Skiko/Compose)
add_header Cross-Origin-Opener-Policy "same-origin" always;
add_header Cross-Origin-Embedder-Policy "require-corp" always;

# Add WASM MIME type
types {
    application/wasm wasm;
}

# index.html: NEVER cache aggressively
location = /index.html {
    add_header Cache-Control "no-cache" always;
}

# Entry point JS (composeApp.js): revalidate always
location ~* ^/(composeApp\.js|styles\.css)$ {
    add_header Cache-Control "no-cache" always;
}

# Hashed JS chunks (446.js, 886.js, etc.): cache forever
location ~* ^/[0-9]+\.js$ {
    expires 1y;
    add_header Cache-Control "public, immutable" always;
}

# WASM files with hashes: cache forever
location ~* \.wasm$ {
    expires 1y;
    add_header Cache-Control "public, immutable" always;
}

# Security headers (applied to all responses)
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-XSS-Protection "1; mode=block" always;
add_header Referrer-Policy "strict-origin-when-cross-origin" always;

# SPA routing: fallback to index.html
location / {
    try_files $uri $uri/ /index.html;
}

# Health check endpoint (for Kubernetes/Docker)
location /health {
    access_log off;
    return 200 "OK\n";
    add_header Content-Type text/plain;
}

// Access in code
import com.apptolast.greenhouse.admin.BuildKonfig

val apiUrl = BuildKonfig.API_BASE_URL

docker build --build-arg API_BASE_URL=https://api.example.com/api/v1/ .

# local.properties
API_BASE_URL=https://api-dev.example.com/api/v1/

name: CI/CD Pipeline

on:
  push:
    branches:
      - develop
      - main
  pull_request:
    branches:
      - develop
      - main

HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
    CMD wget --quiet --tries=1 --spider http://localhost/health || exit 1

docker ps
# Look for "healthy" status

docker inspect --format='{{.State.Health.Status}}' greenhouse-admin

curl http://localhost:8080/health
# Response: OK

apiVersion: v1
kind: Pod
metadata:
  name: greenhouse-admin
spec:
  containers:
  - name: app
    image: apptolast/greenhouse-admin:latest
    ports:
    - containerPort: 80
    livenessProbe:
      httpGet:
        path: /health
        port: 80
      initialDelaySeconds: 5
      periodSeconds: 10
    readinessProbe:
      httpGet:
        path: /health
        port: 80
      initialDelaySeconds: 5
      periodSeconds: 5

# Increase memory in Dockerfile
ENV GRADLE_OPTS="-Dorg.gradle.jvmargs=-Xmx8g -XX:MaxMetaspaceSize=1g"

# The Dockerfile already handles this, but for local builds:
docker build --no-cache .

add_header Cross-Origin-Opener-Policy "same-origin" always;
add_header Cross-Origin-Embedder-Policy "require-corp" always;

# Check nginx logs
docker logs greenhouse-admin

# Verify health endpoint manually
docker exec greenhouse-admin wget -O- http://localhost/health

# View container logs
docker logs -f greenhouse-admin

# Check container resource usage
docker stats greenhouse-admin

# Inspect container configuration
docker inspect greenhouse-admin