Merge remote-tracking branch 'gitlab/master'

Author: codenificient

.gitlab-ci.yml

@@ -0,0 +1,79 @@
+# Shared GitLab CI pipeline template for apps using the common Dockerfile
+# pattern (bun-based Next.js, multi-stage, NEXT_PUBLIC_* ARGs, port 3000).
+#
+# This is the GitLab equivalent of docs/app-build-workflow-template.yml
+# (the GitHub Actions workflow it replaces).
+#
+# USAGE
+#
+#   1. In each app repo (on the GitLab side), drop this file at the root as
+#      .gitlab-ci.yml. No edits needed — image name is derived from
+#      $CI_REGISTRY_IMAGE so the same file works for every repo.
+#
+#   2. Set these CI/CD variables under Settings → CI/CD → Variables (group
+#      level afrotomation, masked + hidden):
+#        NEXT_PUBLIC_ANALYTICS_API_KEY
+#        NEXT_PUBLIC_ANALYTICS_ENDPOINT
+#        NEXT_PUBLIC_ANALYTICS_ENABLED   = "true"
+#        NEXT_PUBLIC_BETTER_AUTH_URL
+#        NEXT_PUBLIC_BETTER_STACK_SOURCE_TOKEN
+#        NEXT_PUBLIC_UMAMI_URL
+#        NEXT_PUBLIC_UMAMI_WEBSITE_ID
+#      ($CI_REGISTRY_USER / $CI_REGISTRY_PASSWORD / $CI_REGISTRY are
+#       provided automatically by GitLab.)
+#
+#   3. Commit + push to the default branch — first build takes ~3-5 min,
+#      image lands at registry.afrotomation.com/afrotomation/<repo>:latest.
+#      ArgoCD image-updater on afrotomation-infra picks up the digest and
+#      rolls the matching Deployment.
+
+stages: [build]
+
+build-image:
+  stage: build
+  image: docker:27-cli
+  services:
+    - name: docker:27-dind
+      alias: docker
+  variables:
+    DOCKER_HOST: tcp://docker:2375/
+    DOCKER_TLS_CERTDIR: ""
+    DOCKER_BUILDKIT: "1"
+  before_script:
+    - apk add --no-cache curl bash
+    # Wait for the DinD sidecar to finish booting (it deliberately delays
+    # TCP bind by ~1s when listening insecure). buildx --bootstrap fails if
+    # we hit the daemon before it's ready, so block until `docker info`
+    # responds or we hit a 60s ceiling.
+    - |
+      for i in $(seq 1 60); do
+        docker info > /dev/null 2>&1 && break
+        sleep 1
+      done
+      docker info > /dev/null
+    - echo "$CI_REGISTRY_PASSWORD" | docker login -u "$CI_REGISTRY_USER" --password-stdin "$CI_REGISTRY"
+  script:
+    - |
+      docker buildx create --use --name afrotomation-builder --driver docker-container --bootstrap
+      docker buildx build \
+        --platform linux/amd64 \
+        --push \
+        --build-arg "NEXT_PUBLIC_ANALYTICS_API_KEY=$NEXT_PUBLIC_ANALYTICS_API_KEY" \
+        --build-arg "NEXT_PUBLIC_ANALYTICS_ENDPOINT=$NEXT_PUBLIC_ANALYTICS_ENDPOINT" \
+        --build-arg "NEXT_PUBLIC_ANALYTICS_ENABLED=$NEXT_PUBLIC_ANALYTICS_ENABLED" \
+        --build-arg "NEXT_PUBLIC_BETTER_AUTH_URL=$NEXT_PUBLIC_BETTER_AUTH_URL" \
+        --build-arg "NEXT_PUBLIC_BETTER_STACK_SOURCE_TOKEN=$NEXT_PUBLIC_BETTER_STACK_SOURCE_TOKEN" \
+        --build-arg "NEXT_PUBLIC_UMAMI_URL=$NEXT_PUBLIC_UMAMI_URL" \
+        --build-arg "NEXT_PUBLIC_UMAMI_WEBSITE_ID=$NEXT_PUBLIC_UMAMI_WEBSITE_ID" \
+        -t "$CI_REGISTRY_IMAGE:latest" \
+        -t "$CI_REGISTRY_IMAGE:$CI_COMMIT_SHA" \
+        -t "$CI_REGISTRY_IMAGE:$CI_COMMIT_REF_SLUG" \
+        -f ./Dockerfile \
+        .
+  rules:
+    - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
+    - if: $CI_COMMIT_TAG
+    - if: $CI_PIPELINE_SOURCE == "web"  # allow manual run
+  tags:
+    - k3s
+    - docker