Dockerfile

# syntax=docker/dockerfile:1.2

# Image page: <https://hub.docker.com/_/node>
FROM node:22-alpine as frontend

RUN mkdir -p /src/web

COPY ./web/package*.json /src/web/

WORKDIR /src/web

# install node dependencies
RUN set -x \
    && npm config set update-notifier false \
    && npm ci --no-audit --prefer-offline

COPY ./api /src/api
COPY ./web /src/web

# build the frontend (built artifact can be found in /src/web/dist)
RUN set -x \
    && npm run generate \
    && npm run build

# Image page: <https://hub.docker.com/_/golang>
FROM golang:1.22-alpine as builder

# can be passed with any prefix (like `v1.2.3@GITHASH`)
# e.g.: `docker build --build-arg "APP_VERSION=v1.2.3@GITHASH" .`
ARG APP_VERSION="undefined@docker"

# renovate: source=github-releases name=deepmap/oapi-codegen
ENV OAPI_CODEGEN_VERSION="2.1.0"

RUN set -x \
    # Install `oapi-codegen`: <https://github.com/deepmap/oapi-codegen>
    && GOBIN=/bin go install "github.com/deepmap/oapi-codegen/v2/cmd/oapi-codegen@v${OAPI_CODEGEN_VERSION}"

# This argument allows to install additional software for local development using docker and avoid it \
# in the production build
ARG DEV_MODE="false"

RUN set -x \
    && if [ "${DEV_MODE}" = "true" ]; then \
      # The following dependencies are needed for `go test` to work
      apk add --no-cache gcc musl-dev \
      # The following tool is used to format the imports in the source code
      && GOBIN=/bin go install golang.org/x/tools/cmd/goimports@latest \
    ;fi

COPY . /src

WORKDIR /src

COPY --from=frontend /src/web/dist /src/web/dist

# arguments to pass on each go tool link invocation
ENV LDFLAGS="-s -w -X gh.tarampamp.am/webhook-tester/internal/version.version=$APP_VERSION"

RUN set -x \
    && go generate ./... \
    && CGO_ENABLED=0 go build -trimpath -ldflags "$LDFLAGS" -o /tmp/webhook-tester ./cmd/webhook-tester/ \
    && /tmp/webhook-tester --version \
    && /tmp/webhook-tester -h

# prepare rootfs for runtime
RUN mkdir -p /tmp/rootfs

WORKDIR /tmp/rootfs

RUN set -x \
    && mkdir -p \
        ./etc \
        ./bin \
    && echo 'appuser:x:10001:10001::/nonexistent:/sbin/nologin' > ./etc/passwd \
    && echo 'appuser:x:10001:' > ./etc/group \
    && mv /tmp/webhook-tester ./bin/webhook-tester

# use empty filesystem
FROM scratch as runtime

ARG APP_VERSION="undefined@docker"

LABEL \
    # Docs: <https://github.com/opencontainers/image-spec/blob/master/annotations.md>
    org.opencontainers.image.title="webhook-tester" \
    org.opencontainers.image.description="Test your HTTP webhooks using friendly web UI" \
    org.opencontainers.image.url="https://github.com/tarampampam/webhook-tester" \
    org.opencontainers.image.source="https://github.com/tarampampam/webhook-tester" \
    org.opencontainers.image.vendor="tarampampam" \
    org.opencontainers.version="$APP_VERSION" \
    org.opencontainers.image.licenses="MIT"

# Import from builder
COPY --from=builder /tmp/rootfs /

# Use an unprivileged user
USER 10001:10001

ENV LISTEN_PORT=8080

# Docs: <https://docs.docker.com/engine/reference/builder/#healthcheck>
HEALTHCHECK --interval=15s --timeout=3s --start-period=1s CMD [ \
    "/bin/webhook-tester", "--log-json", "healthcheck" \
]

ENTRYPOINT ["/bin/webhook-tester"]

CMD ["--log-json", "serve"]