first try

Author: zeylos

src/backend/Dockerfile

@@ -2,22 +2,29 @@
 FROM python:3.13.7-slim-trixie AS base
 
 # Bump this to force an update of the apt repositories
-ENV MIN_UPDATE_DATE="2025-09-02"
+ENV MIN_UPDATE_DATE="2025-12-01"
 
-RUN apt-get update && apt-get upgrade -y \
-    && rm -rf /var/lib/apt/lists/*
+RUN <<EOR
+apt-get update
+DEBIAN_FRONTEND="noninteractive" apt-get upgrade -y
+rm -rf /var/lib/apt/lists/*
+EOR
 
-ENV PYTHONUNBUFFERED=1
+ENV PYTHONUNBUFFERED=1 PYTHONDONTWRITEBYTECODE=1
 
 WORKDIR /app
 
 # ---- Poetry package manager and dev system deps ----
 FROM base AS poetry
 
-RUN apt-get update && apt-get install -y --no-install-recommends \
+RUN <<EOR
+apt-get update
+DEBIAN_FRONTEND="noninteractive" apt-get install -y --no-install-recommends \
     curl \
     rdfind \
-    && rm -rf /var/lib/apt/lists/*
+    libmagic1
+rm -rf /var/lib/apt/lists/*
+EOR
 
 ENV POETRY_NO_INTERACTION=1
 ENV POETRY_VIRTUALENVS_CREATE=0
@@ -55,13 +62,11 @@ COPY . /app/
 WORKDIR /app
 
 # collectstatic
-RUN DJANGO_CONFIGURATION=Build \
-    python manage.py collectstatic --noinput
-
-# Replace duplicated file by a symlink to decrease the overall size of the
-# final image
-RUN rdfind -makesymlinks true -followsymlinks true -makeresultsfile false ${MESSAGES_STATIC_ROOT}
-
+RUN <<EOR
+DJANGO_CONFIGURATION=Build python manage.py collectstatic --noinput
+# Replace duplicated file by a symlink to decrease the overall size of the final image
+rdfind -makesymlinks true -followsymlinks true -makeresultsfile false ${MESSAGES_STATIC_ROOT}
+EOR
 
 # ---- Base runtime image ----
 FROM base AS runtime-base
@@ -72,10 +77,13 @@ FROM base AS runtime-base
 RUN chmod g=u /etc/passwd
 
 # Install required packages
-RUN apt-get update && apt-get install -y --no-install-recommends \
-    gettext \
-    libmagic1 \
-    && rm -rf /var/lib/apt/lists/*
+RUN <<EOR
+apt-get update
+DEBIAN_FRONTEND="noninteractive" apt-get install -y --no-install-recommends \
+  gettext \
+  libmagic1
+rm -rf /var/lib/apt/lists/*
+EOR
 
 # Un-privileged user running the application
 ARG DOCKER_USER
@@ -110,11 +118,10 @@ CMD ["python", "manage.py", "runserver", "0.0.0.0:8000"]
 
 # ---- Base runtime image for production ----
 FROM runtime-base AS runtime-prod
+ARG MESSAGES_STATIC_ROOT=/data/static
 
 COPY --from=base-with-deps /venv /venv
-
 COPY --from=link-collector ${MESSAGES_STATIC_ROOT} ${MESSAGES_STATIC_ROOT}
-
 COPY . /app/
 
 # The default command runs gunicorn WSGI server in messages's main module

src/backend/entrypoint

@@ -31,5 +31,11 @@ if ! whoami > /dev/null 2>&1; then
   fi
 fi
 
+# This _HAS_ to be "true" on a single backend instance
+if [ "${ENABLE_DB_MIGRATIONS:-false}" = "true" ]; then
+  echo "🐳(entrypoint) running django migrations..."
+  python manage.py migrate --noinput
+fi
+
 echo "🐳(entrypoint) running your command: ${*}"
 exec "$@"

src/frontend/Dockerfile

@@ -14,7 +14,6 @@ USER ${DOCKER_USER}
 COPY --chown=${DOCKER_USER} package*.json ./
 RUN npm install
 
-
 FROM frontend-deps AS frontend-build
 
 WORKDIR /home/frontend/
@@ -24,3 +23,12 @@ ARG API_ORIGIN
 ENV NEXT_PUBLIC_API_ORIGIN=${API_ORIGIN}
 
 RUN npm run build
+
+FROM docker.io/nginxinc/nginx-unprivileged:1-alpine AS runtime-prod
+
+COPY --from=frontend-build /home/frontend/out /app
+COPY nginx/nginx.conf.template /etc/nginx/templates/default.conf.template
+
+ENV MESSAGES_FRONTEND_PORT=8080
+ENV MESSAGES_FRONTEND_BACKEND_SERVER=localhost:8000
+ENV DJANGO_ADMIN_URL=admin

src/frontend/nginx/nginx.conf.template

@@ -0,0 +1,61 @@
+upstream backend_server {
+    server ${MESSAGES_FRONTEND_BACKEND_SERVER} fail_timeout=0;
+}
+
+server {
+    listen ${MESSAGES_FRONTEND_PORT};
+    server_name _;
+    server_tokens off;
+    root /app;
+    error_page 404 /404.html;
+
+    # Django rest framework
+    location ^~ /api/ {
+        proxy_set_header X-Forwarded-Proto https;
+        proxy_set_header Host $http_host;
+        proxy_set_header X-Forwarded-For $remote_addr;
+        proxy_redirect off;
+        proxy_pass http://backend_server;
+     }
+
+    # Django admin
+    location ^~ ^/${DJANGO_ADMIN_URL}/ {
+        proxy_set_header X-Forwarded-Proto https;
+        proxy_set_header Host $http_host;
+        proxy_set_header X-Forwarded-For $remote_addr;
+        proxy_redirect off;
+        proxy_pass http://backend_server;
+    }
+
+    # Next static export
+    location ~* ^/mailbox/[^/]+$ {
+        try_files /mailbox/[mailboxId].html =404;
+    }
+    location ~* ^/mailbox/[^/]+/thread/[^/]+$ {
+        try_files /mailbox/[mailboxId]/thread/[threadId].html =404;
+    }
+    location ~* ^/mailbox/[^/]+/new$ {
+        try_files /mailbox/[mailboxId]/new.html =404;
+    }
+    location ~* ^/domain$ {
+        try_files /domain.html =404;
+    }
+    location ~* ^/domain/[^/]+$ {
+        try_files /domain/[maildomainId].html =404;
+    }
+    location ~* ^/domain/[^/]+/dns$ {
+        try_files /domain/[maildomainId]/dns.html =404;
+    }
+    location ~* ^/domain/[^/]+/signatures$ {
+        try_files /domain/[maildomainId]/signatures.html =404;
+    }
+
+    location = /404.html {
+        internal;
+    }
+
+    # Frontend export
+    location / {
+        try_files $uri index.html $uri/ =404;
+    }
+}