storage saved to local disk, docker builds to github, added disable registration

Author: bendangelo

.github/workflows/docker.yml

@@ -1,29 +1,49 @@
-name: Build and Push Docker Image
+name: Auto-tag and Docker Build
 
 on:
   push:
     branches: [master]
 
 jobs:
-  docker:
+  tag:
     runs-on: ubuntu-latest
+    outputs:
+      new_tag: ${{ steps.tag.outputs.new_tag }}
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
 
+      - name: Bump version and push tag
+        id: tag
+        uses: mathieudutour/[email protected]
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          default_bump: patch
+          tag_prefix: v
+
+  docker:
+    needs: tag
+    runs-on: ubuntu-latest
     steps:
       - name: Checkout code
         uses: actions/checkout@v3
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
-      - name: Log in to Docker Hub
+      - name: Log in to GitHub Container Registry
         uses: docker/login-action@v3
         with:
-          username: ${{ secrets.DOCKER_USERNAME }}
-          password: ${{ secrets.DOCKER_PASSWORD }}
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and push Docker image
         uses: docker/build-push-action@v5
         with:
           context: .
           push: true
-          tags: iteratorpm/iterator:latest
+          platforms: linux/amd64,linux/arm64
+          tags: |
+            ghcr.io/iteratorpm/iterator:latest
+            ghcr.io/iteratorpm/iterator:${{ needs.tag.outputs.new_tag }}

README.md

@@ -83,7 +83,7 @@ docker run -d \
   -p 3000:3000 \
   -e [email protected]:password \
   -v ./iterator-db:/usr/src/app/storage \
-  iteratorpm/iterator:latest
+  ghcr.io/iteratorpm/iterator:latest
 ```
 
 Visit `http://localhost:3000` with demo credentials:

app/models/user.rb

@@ -36,8 +36,18 @@ def self.ransackable_associations(auth_object = nil)
   belongs_to :current_organization, class_name: 'Organization', optional: true
 
   # Include default devise modules. Others available are:
-  devise :invitable, :database_authenticatable, :registerable,
-         :recoverable, :rememberable, :validatable, :confirmable
+  devise_modules = [
+    :invitable,
+    :database_authenticatable,
+    :recoverable,
+    :rememberable,
+    :validatable,
+    :confirmable
+  ]
+
+  devise_modules << :registerable unless ENV["DISABLE_REGISTRATION"] == "true"
+
+  devise(*devise_modules)
 
   validates :name, length: { minimum: 1, maximum: 30 }
   validates :username, length: { minimum: 1, maximum: 30 }

app/views/layouts/_header.html.slim

@@ -45,6 +45,7 @@ header.bg-white.shadow-sm
 
                     = button_to "Sign Out", destroy_user_session_path, method: :delete, class: "block w-full text-left px-4 py-2 text-sm text-gray-700 hover:bg-gray-100", role: "menuitem", tabindex: "-1", data: { aid: "ProfileDropdown__signout" }
         - else
-          span.text-gray-600 Don't have an account?
-          a.ml-2.text-blue-600.font-medium.hover:text-blue-800 href=new_user_registration_path SIGN UP
+          - if devise_mapping.registerable? && controller_name != 'registrations'
+            span.text-gray-600 Don't have an account?
+            a.ml-2.text-blue-600.font-medium.hover:text-blue-800 href=new_user_registration_path SIGN UP
 

config/routes.rb

@@ -1,5 +1,9 @@
 Rails.application.routes.draw do
-  devise_for :users
+  if ENV["DISABLE_REGISTRATION"] == "true"
+    devise_for :users, skip: [:registrations]
+  else
+    devise_for :users
+  end
 
   # Reveal health status on /up that returns 200 if the app boots with no exceptions, otherwise 500.
   # Can be used by load balancers and uptime monitors to verify that the app is live.

config/storage.yml

@@ -6,6 +6,10 @@ local:
   service: Disk
   root: <%= Rails.root.join("storage") %>
 
+production:
+  service: Disk
+  root: <%= Rails.root.join("storage") %>
+
 # Use bin/rails credentials:edit to set the AWS secrets (as aws:access_key_id|secret_access_key)
 # amazon:
 #   service: S3

docker-compose.yml

@@ -1,24 +1,50 @@
 version: '3.8'
 services:
-  db:
-    image: postgres:17
+  iterator-db:
+    image: postgres:17-alpine
+    restart: always
     environment:
       POSTGRES_USER: postgres
       POSTGRES_PASSWORD: password
       POSTGRES_DB: iterator
+    networks:
+      - iterator-network
     volumes:
-      - pgdata:/var/lib/postgresql/data
+      - postgres-volume:/var/lib/postgresql/data
 
-  web:
+  iterator-web:
     image: iteratorpm/iterator:latest
+    restart: always
     environment:
-      DATABASE_URL: postgres://postgres:password@db/iterator
+      DATABASE_URL: postgres://postgres:password@db:5432/iterator
+      RAILS_ENV: production
+      RAILS_LOG_TO_STDOUT: true
+      RAILS_SERVE_STATIC_FILES: true
+      SECRET_KEY_BASE: "replace this with random characters!"
+      APP_HOST: yourwebsite.com
+      APP_PROTOCOL: https
+      DISABLE_REGISTRATION: "false"
+      SMTP_ADDRESS: smtp.yourprovider.com
+      SMTP_PORT: 587
+      SMTP_USER_NAME: your_username
+      SMTP_PASSWORD: your_password
+      DEFAULT_FROM_EMAIL: [email protected]
+    volumes:
+      - storage-volume:/usr/src/app/storage
     depends_on:
-      - db
+      - iteraotr-db
     ports:
       - "3000:3000"
-    env_file:
-      - .env
+   networks:
+      - iterator-network
 
 volumes:
-  pgdata:
+  postgres-volume:
+    external: false
+
+  storage-volume:
+    external: false
+
+networks:
+  iterator-network:
+    external: false