??

.drone.yml

@@ -1,142 +1,147 @@
-kind: pipeline
+# kind: pipeline
-type: docker
+# type: docker
-name: Test Pipeline
+# name: Test Pipeline
 
-workspace:
+# workspace:
-  path: /drone/grow
+#   path: /drone/grow
 
-steps:
+# steps:
-- name: yarn install
+# - name: yarn install
-  image: node:latest
+#   image: node:latest
-  commands:
+#   commands:
-  - yarn install
+#   - yarn install
-- name: Code Style Checks
+# - name: Code Style Checks
-  image: node:latest
+#   image: node:latest
-  commands:
+#   commands:
-  - yarn prettier
+#   - yarn prettier
-- name: Lint
+# - name: Lint
-  image: node:latest
+#   image: node:latest
-  commands:
+#   commands:
-  - yarn lint
+#   - yarn lint
-- name: Unit Tests
+# - name: Unit Tests
-  image: node:latest
+#   image: node:latest
-  commands:
+#   commands:
-  - yarn test
+#   - yarn test
-- name: Send Test Status Notification
+# - name: Send Test Status Notification
-  image: plugins/webhook
+#   image: plugins/webhook
-  settings:
+#   settings:
-    urls: https://lab.mifi.dev/hooks/9p65zpagctgkmndo8nwwm4199r
+#     urls: https://lab.mifi.dev/hooks/9p65zpagctgkmndo8nwwm4199r
-    content_type: application/json
+#     content_type: application/json
-    template: |
+#     template: |
-      {
+#       {
-        "icon_url":"https://emojipedia-us.s3.dualstack.us-west-1.amazonaws.com/thumbs/120/apple/198/freezing-face_1f976.png",
+#         "icon_url":"https://emojipedia-us.s3.dualstack.us-west-1.amazonaws.com/thumbs/120/apple/198/freezing-face_1f976.png",
-        "text": "[{{ repo.name }} - Build # {{ build.number }}] Code Quality Checks {{ build.status }} {{#success build.status}}:tada:{{else}}:poop:{{/success}}",
+#         "text": "[{{ repo.name }} - Build # {{ build.number }}] Code Quality Checks {{ build.status }} {{#success build.status}}:tada:{{else}}:poop:{{/success}}",
-        "username":"DroneBot"
+#         "username":"DroneBot"
-      }
+#       }
-  when:
+#   when:
-    status:
+#     status:
-      - success
+#       - success
-      - failure
+#       - failure
-- name: Build
+# - name: Build
-  image: node:latest
+#   image: node:latest
-  commands:
+#   commands:
-  - yarn build
+#   - yarn build
-- name: Send Build Status Notifications
+# - name: Send Build Status Notifications
-  image: plugins/webhook
+#   image: plugins/webhook
-  settings:
+#   settings:
-    urls: https://lab.mifi.dev/hooks/9p65zpagctgkmndo8nwwm4199r
+#     urls: https://lab.mifi.dev/hooks/9p65zpagctgkmndo8nwwm4199r
-    content_type: application/json
+#     content_type: application/json
-    template: |
+#     template: |
-      {
+#       {
-        "icon_url":"https://emojipedia-us.s3.dualstack.us-west-1.amazonaws.com/thumbs/120/apple/198/freezing-face_1f976.png",
+#         "icon_url":"https://emojipedia-us.s3.dualstack.us-west-1.amazonaws.com/thumbs/120/apple/198/freezing-face_1f976.png",
-        "text": "[{{ repo.name }} - Build # {{ build.number }}] Build package {{ build.status }} {{#success build.status}}:tada:{{else}}:poop:{{/success}}",
+#         "text": "[{{ repo.name }} - Build # {{ build.number }}] Build package {{ build.status }} {{#success build.status}}:tada:{{else}}:poop:{{/success}}",
-        "username":"DroneBot"
+#         "username":"DroneBot"
-      }
+#       }
-  when:
+#   when:
-    status:
+#     status:
-      - success
+#       - success
-      - failure
+#       - failure
 
-trigger:
+# trigger:
-  branch:
+#   branch:
-  - main
+#   - main
-  event:
+#   event:
-  - pull_request
+#   # - pull_request
-  - push
+#   - push
 
----
+# ---
 kind: pipeline
 type: docker
 name: Publish Pipeline
-group: publish
 
 workspace:
   path: /drone/grow
 
 steps:
-- name: Build Package
+# - name: Build Package
-  image: node:latest
+#   image: node:latest
-  commands:
+#   commands:
-    - yarn install
+#     - yarn install
-    - yarn build
+#     - yarn build
-- name: Publish NPM
+# - name: Publish NPM
-  image: plugins/npm
+#   image: node:20-alpine
-  failure: ignore
+#   failure: ignore
-  settings:
+#   commands:
-    username:
+#     - yarn publish -t ${DRONE_TAG}
-      from_secret: registry_username
+#   volumes:
-    password:
+#   - name: npmrc
-      from_secret: registry_password
+#     path: /drone/grow/.npmrc
-    registry: https://git.mifi.dev/api/packages/mifi/npm
+# - name: Publish NPM
-    token:
+#   image: plugins/npm
-    - from_secret: gitea_token
+#   failure: ignore
-  volumes:
-  - name: npmrc
-    path: /drone/grow/.npmrc
-- name: Report NPM Publish Status
-  image: plugins/webhook
-  settings:
-    urls: https://lab.mifi.dev/hooks/ccw34hdf7tgbjmzp96nptn938r
-    content_type: application/json
-    template: |
-      {
-        "icon_url":"https://emojipedia-us.s3.dualstack.us-west-1.amazonaws.com/thumbs/120/apple/198/freezing-face_1f976.png",
-        "text": "[{{ repo.name }} - New npm package release {{tag}} from # {{ build.number }}] Deploy {{ build.status }} {{#success build.status}}:tada:{{else}}:poop:{{/success}}",
-        "username":"DroneBot"
-      }
-  when:
-    status:
-      - success
-      - failure
-- name: Publish Image
-  image: docker
-  commands:
-    - docker build -f docker-compose.staging.yml -t git.mifi.dev/mifi/mifi/auth:latest .
-    - docker push git.mifi.dev/mifi/mifi/auth:latest
-  volumes:
-  - name: dockersock
-    path: /var/run/docker.sock
-  - name: dockerconfig
-    path: /drone/grow/.docker/config.json
-# - name: Publish Image
-#   image: plugins/docker
 #   settings:
-#     auto_tag: true
-#     squash: true
-#     repo: git.mifi.dev/mifi/auth
-#     context: mifi
-#     registry: git.mifi.dev
 #     username:
 #       from_secret: registry_username
 #     password:
 #       from_secret: registry_password
-#     ssh-agent-key:
+#     registry: https://git.mifi.dev/api/packages/mifi/npm
-#       from_secret: gitea_token
+#     token:
+#     - from_secret: gitea_token
+#   volumes:
+#   - name: npmrc
+#     path: /drone/grow/.npmrc
+# - name: Report NPM Publish Status
+#   image: plugins/webhook
+#   settings:
+#     urls: https://lab.mifi.dev/hooks/ccw34hdf7tgbjmzp96nptn938r
+#     content_type: application/json
+#     template: |
+#       {
+#         "icon_url":"https://emojipedia-us.s3.dualstack.us-west-1.amazonaws.com/thumbs/120/apple/198/freezing-face_1f976.png",
+#         "text": "[{{ repo.name }} - New npm package release {{tag}} from # {{ build.number }}] Deploy {{ build.status }} {{#success build.status}}:tada:{{else}}:poop:{{/success}}",
+#         "username":"DroneBot"
+#       }
+#   when:
+#     status:
+#       - success
+#       - failure
+- name: Publish Image
+  image: docker
+  failure: ignore
+  commands:
+    - 'echo U - $REGISTRY_USERNAME P - ${{REGISTRY_PASSWORD}}'
+    - docker login -u $REGISTRY_USERNAME -p $REGISTRY_PASSWORD git.mifi.dev
+    - 'docker build -t git.mifi.dev/mifi/mifi/auth:latest -t git.mifi.dev/mifi/mifi/auth:${DRONE_TAG:-latest} .'
+    - docker push git.mifi.dev/mifi/mifi/auth:latest
+  secrets: [registry_username, registry_password]
   volumes:
   - name: dockersock
     path: /var/run/docker.sock
   - name: dockerconfig
     path: /drone/grow/.docker/config.json
+- name: Publish Image (plugin)
+  image: plugins/docker
+  settings:
+    auto_tag: true
+    repo: git.mifi.dev/mifi/mifi/auth
+    registry: git.mifi.dev
+    debug: true
+    # ssh-agent-key:
+    #   from_secret: reg_token    
+    # username:
+    #   from_secret: registry_username
+    # password:
+    #   from_secret: registry_password
 - name: Report Image Publish Status
   image: plugins/webhook
   settings:
@@ -164,74 +169,79 @@ volumes:
   host:
     path: /volume1/docker/beethoven/labs-auth/.npmrc
 
-depends_on:
+# depends_on:
-  - Test Pipeline
+#   - Test Pipeline
 
 trigger:
   branch:
   - main
   event:
   - push
-  - tag
+  # - tag
 
----
+# ---
-kind: pipeline
+# kind: pipeline
-type: docker
+# type: docker
-name: Deploy Pipeline
+# name: Deploy Pipeline
 
-workspace:
+# workspace:
-  path: /drone/grow
+#   path: /drone/grow
 
-steps:
+# steps:
-- name: Deploy Container
+# - name: Deploy Container
-  image: docker
+#   image: docker
-  privileged: true
+#   privileged: true
-  commands:
+#   environment:
-    - docker compose -f docker-compose.staging.yml pull
+#     CONTAINER_PREFIX: staging
-    - docker compose -f docker-compose.staging.yml build --no-cache
+#     HOST: area51.mifi.dev
-    - docker compose -f docker-compose.staging.yml rm --stop
+#     ROUTE_PREFIX: /auth
-    - docker compose -f docker-compose.staging.yml up --wait
+#     PORT: 9001
-  volumes:
+#   commands:
-  - name: env
+#     - docker compose -f docker-compose.staging.yml pull
-    path: /drone/grow/.env
+#     - docker compose -f docker-compose.staging.yml build --no-cache
-  - name: dockersock
+#     - docker compose -f docker-compose.staging.yml rm --stop
-    path: /var/run/docker.sock
+#     - docker compose -f docker-compose.staging.yml up --wait
-  - name: dockerconfig
+#   volumes:
-    path: /drone/grow/.docker/config.json
+#   - name: env-secrets
-- name: Send Status Notifications
+#     path: /drone/grow/staging.env
-  image: plugins/webhook
+#   - name: dockersock
-  privileged: true
+#     path: /var/run/docker.sock
-  settings:
+#   - name: dockerconfig
-    urls: https://lab.mifi.dev/hooks/ccw34hdf7tgbjmzp96nptn938r
+#     path: /drone/grow/.docker/config.json
-    content_type: application/json
+# - name: Send Status Notifications
-    template: |
+#   image: plugins/webhook
-      {
+#   privileged: true
-        "icon_url":"https://emojipedia-us.s3.dualstack.us-west-1.amazonaws.com/thumbs/120/apple/198/freezing-face_1f976.png",
+#   settings:
-        "text": "[{{ repo.name }} - Build # {{ build.number }}] Deploy {{ build.status }} {{#success build.status}}:tada:{{else}}:poop:{{/success}}",
+#     urls: https://lab.mifi.dev/hooks/ccw34hdf7tgbjmzp96nptn938r
-        "username":"DroneBot"
+#     content_type: application/json
-      }
+#     template: |
-  when:
+#       {
-    status:
+#         "icon_url":"https://emojipedia-us.s3.dualstack.us-west-1.amazonaws.com/thumbs/120/apple/198/freezing-face_1f976.png",
-      - success
+#         "text": "[{{ repo.name }} - Build # {{ build.number }}] Deploy {{ build.status }} {{#success build.status}}:tada:{{else}}:poop:{{/success}}",
-      - failure
+#         "username":"DroneBot"
+#       }
+#   when:
+#     status:
+#       - success
+#       - failure
 
-volumes:
+# volumes:
-- name: dockerconfig
+# - name: dockerconfig
-  host:
+#   host:
-    path: /volume1/docker/dockerconfig.json
+#     path: /volume1/docker/dockerconfig.json
-- name: dockersock
+# - name: dockersock
-  host:
+#   host:
-    path: /var/run/docker.sock
+#     path: /var/run/docker.sock
-- name: env
+# - name: env-secrets
-  host:
+#   host:
-    path: /volume1/docker/beethoven/labs-auth/staging.env
+#     path: /volume1/docker/beethoven/labs-auth/staging.env
 
-depends_on:
+# # depends_on:
-  - Test Pipeline
+# #   - Test Pipeline
 
-trigger:
+# trigger:
-  branch:
+#   branch:
-  - main
+#   - main
-  event:
+#   event:
-  - push
+#   - push
-  - tag
+#   # - tag

.env.dev

@@ -27,5 +27,3 @@ RESET_VALID_MINUTES=15
 DEFAULT_TOKEN_DAYS=1
 
 CONTAINER_PREFIX=dev
-SERVICE_NAME=auth-service
-DB_TYPE=mongo

Dockerfile

@@ -1,13 +1,3 @@
-# FROM node:20-alpine AS build
-# RUN mkdir -p /home/node/app/node_modules && chown -R node:node /home/node/app
-# WORKDIR /home/node/app
-# COPY package*.json .
-# COPY dist/lib .
-# USER node
-# RUN yarn install --frozen-lockfile --production
-# COPY --chown=node:node node_modules ./node_modules
-# CMD ["node", "dist/lib/server/index.js"]
-
 FROM node:20-alpine AS build
 WORKDIR /home/node/app
 COPY package*.json ./
@@ -15,14 +5,14 @@ COPY tsconfig.json ./
 COPY lib ./lib
 RUN ls -a
 RUN yarn install
-RUN yarn build:production
+RUN yarn build
 
 ## this is stage two , where the app actually runs
 FROM node:20-alpine AS containerize
+ENV NODE_ENV ${ENV:-production}
 WORKDIR /home/node/app
 COPY package*.json ./
 RUN yarn install --frozen-lockfile --production
-COPY --from=0 /home/node/app/dist .
+COPY --from=0 /home/node/app/dist/**/*.js .
-EXPOSE 9001
+EXPOSE ${PORT}
-EXPOSE 27017
 CMD ["node","server/index.js"]

docker-compose.dev.yml

@@ -2,33 +2,40 @@ version: '3.8'
 
 services:
     auth-service_mongo:
-        env_file: dev.env
+        env_file: .env.dev
+        build:
+            args:
+              - CONTAINER_PREFIX=${CONTAINER_PREFIX}
         container_name: ${CONTAINER_PREFIX:-dev}-auth-service_mongo
         ports:
             - 27017:27017
         networks:
-            - docknet
+            - labs-net
         volumes:
-            # - /var/tmp/labs:/data/db
+            - /var/tmp/labs:/data/db
             - ./mongo-init.js:/docker-entrypoint-initdb.d/mongo-init.js:ro
         restart: unless-stopped
         image: mongo:latest
     auth-service:
-        env_file: dev.env
+        env_file: .env.dev
-        build: .
+        build:
+            context: .
+            args:
+              - HOST=${HOST}
+              - PORT=${PORT}
+              - ROUTE_PREFIX=${ROUTE_PREFIX}
+              - CONTAINER_PREFIX=${CONTAINER_PREFIX}
         container_name: ${CONTAINER_PREFIX:-dev}-auth-service
         ports:
-            - 9000:9000
+            - 9001:9001
         environment:
             - DB_HOST=${CONTAINER_PREFIX:-dev}-auth-service_mongo
         networks:
-            - docknet
+            - labs-net
         restart: unless-stopped
         image: node:20-alpine
-        links:
-            - auth-service_mongo:${CONTAINER_PREFIX:-dev}-auth-service_mongo
         depends_on:
             - auth-service_mongo
 networks:
-    docknet:
+    labs-net:
-        name: docknet
+        name: labs-net

docker-compose.staging.yml

@@ -3,38 +3,22 @@ version: '3.8'
 services:
     auth-service_mongo:
         container_name: ${CONTAINER_PREFIX}-auth-service_mongo
-        env_file: .env
+        env_file:
-        environment:
+            - staging.env
-            - ALLOW_EMPTY_PASSWORD=yes
-            - MONGO_INITDB_ROOT_USERNAME=${DB_USERNAME}
-            - MONGO_INITDB_ROOT_PASSWORD=${DB_PASSWORD}
-            - MONGO_INITDB_DATABASE=${DB_NAME}
         networks:
             - docknet
         volumes:
             - '/volume1/docker/labs/auth/mongo:/data/db'
+            # - ./mongo-init.js:/docker-entrypoint-initdb.d/mongo-init.js:ro
         restart: unless-stopped
-        image: mongo
+        image: mongo:latest
     auth-service:
-        env_file: .env
+        env_file:
+            - staging.env
         build: .
         container_name: ${CONTAINER_PREFIX}-auth-service
         environment:
-            - PORT=${PORT}
-            - ROUTE_PREFIX=${ROUTE_PREFIX}
-            - LOGIN_ROUTE=${LOGIN_ROUTE}
-            - RESET_ROUTE=${RESET_ROUTE}
             - DB_HOST=${CONTAINER_PREFIX}-auth-service_mongo
-            - DB_USERNAME=${DB_USERNAME}
-            - DB_PASSWORD=${DB_PASSWORD}
-            - DB_NAME=${DB_NAME}
-            - SESSION_KEY=${SESSION_KEY}
-            - JWT_AUDIENCE=${JWT_AUDIENCE}
-            - JWT_ISSUER=${JWT_ISSUER}
-            - JWT_SECRET=${JWT_SECRET}
-            - LOGIN_VALID_TIME=${LOGIN_VALID_TIME}
-            - RESET_VALID_MINUTES=${RESET_VALID_MINUTES}
-            - DEFAULT_TOKEN_DAYS=${DEFAULT_TOKEN_DAYS}
         labels:
             - 'traefik.enable=true'
             - 'traefik.http.routers.grow.rule=Host(`${HOST}`) && Path(`${ROUTE_PREFIX}`)'
@@ -46,11 +30,10 @@ services:
         networks:
             - docknet
         restart: unless-stopped
-        image: node
+        image: node:20-alpine
-        links:
-            - auth-service_mongo:${CONTAINER_PREFIX}-auth-service_mongo
         depends_on:
             - auth-service_mongo
 networks:
     docknet:
         name: docknet
+        external: true

mongo-init.js

@@ -1,5 +1,5 @@
 /* eslint-disable no-undef */
-db = db.getSiblingDB(process.env.DB_NAME || 'not_set');
+db = db.getSiblingDB(process.env.DB_NAME);
 db.createUser({
     user: process.env.DB_USERNAME,
     pwd: process.env.DB_PASSWORD,

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mifi/auth",
-  "version": "0.0.25",
+  "version": "0.0.34",
   "author": "mifi (Mike Fitzpatrick)",
   "license": "MIT",
   "scripts": {
@@ -80,6 +80,5 @@
   "repository": {
     "type": "git",
     "url": "https://git.mifi.dev/mifi/auth.git"
-  },
+  }
-  "registry": "https://git.mifi.dev"
 }