Initial commit

Author: joecorall

.github/workflows/github-release.yml

@@ -0,0 +1,18 @@
+name: Create release
+on:
+  pull_request_target:
+    branches:
+      - main
+    types:
+      - closed
+jobs:
+  release:
+    if: github.event.pull_request.merged == true && !contains(github.event.pull_request.title, 'skip-release')
+    uses: libops/actions/.github/workflows/bump-release.yaml@main
+    with:
+      workflow_file: goreleaser.yml
+      prefix: v
+    permissions:
+      contents: write
+      actions: write
+    secrets: inherit

.github/workflows/goreleaser.yml

@@ -0,0 +1,32 @@
+name: goreleaser
+on:
+  workflow_dispatch:
+  push:
+    tags:
+      - "*"
+
+permissions:
+  contents: write
+
+jobs:
+  goreleaser:
+    runs-on: ubuntu-24.04
+    steps:
+      - name: Checkout
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+        with:
+          fetch-depth: 0
+
+      - name: Set up Go
+        uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
+        with:
+          go-version: ">=1.25.3"
+
+      - name: Run GoReleaser
+        uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6
+        with:
+          distribution: goreleaser
+          version: latest
+          args: release --clean
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/lint-test-build.yml

@@ -0,0 +1,94 @@
+name: build-push
+on:
+  push:
+  workflow_dispatch:
+
+jobs:
+  lint-test:
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+
+      - name: Set up Go
+        uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
+        with:
+          go-version: ">=1.25.3"
+
+      - name: Cache Go tools
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+        with:
+          path: |
+            ~/go/pkg/mod
+            ~/go/bin
+          key: ${{ runner.os }}-golang-${{ hashFiles('go.sum', 'Makefile') }}
+          restore-keys: |
+            ${{ runner.os }}-golang-
+
+      - name: golangci-lint
+        uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v9
+        with:
+          version: latest
+          install-only: true
+
+      - name: setup
+        run: make install-tools
+
+      - name: lint
+        run: make lint
+
+      - name: test
+        run: make test
+
+      #- name: check contract
+      #  run: make proto-breaking
+
+  push:
+    needs: [lint-test]
+    uses: libops/.github/.github/workflows/build-push-ghcr.yaml@main
+    permissions:
+      contents: read
+      packages: write
+    secrets: inherit
+
+  codecov:
+    needs: [lint-test]
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+
+      - name: Set up Go
+        uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
+        with:
+          go-version: ">=1.25.3"
+
+      - name: coverage
+        run: go test -v -coverprofile=coverage.out -covermode=atomic ./internal/...
+
+      - name: upload coverage to codecov
+        uses: codecov/codecov-action@5a1091511ad55cbe89839c7260b706298ca349f7 # v5
+        with:
+          files: ./coverage.out
+          fail_ci_if_error: true
+        env:
+          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+
+  integration-test:
+    needs: [lint-test]
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+
+      - run: make integration-test
+
+      - name: Display test logs on failure
+        if: failure()
+        run: |
+          cd ci
+          echo "=== API Logs ==="
+          docker compose logs api
+          echo ""
+          echo "=== Vault Logs ==="
+          docker compose logs vault
+          echo ""
+          echo "=== MariaDB Logs ==="
+          docker compose logs mariadb

.gitignore

@@ -0,0 +1,18 @@
+<<<<<<< HEAD
+api
+secrets
+=======
+# Build artifacts
+/api
+
+# Secrets and sensitive files
+*.key
+*.pem
+.env
+.env.*
+!.env.example
+secrets/
+
+# Dependencies
+>>>>>>> 3b6a1a7 (Initial commit)
+web/node_modules

.golangci.yml

@@ -0,0 +1,28 @@
+version: "2"
+linters:
+  exclusions:
+    generated: lax
+    presets:
+      - comments
+      - common-false-positives
+      - legacy
+      - std-error-handling
+    paths:
+      - ../../go
+      - ../../../../opt
+      - ./vendor
+      - third_party$
+      - builtin$
+      - examples$
+formatters:
+  enable:
+    - gofmt
+  exclusions:
+    generated: lax
+    paths:
+      - ../../go
+      - ../../../../opt
+      - ./vendor
+      - third_party$
+      - builtin$
+      - examples$

.goreleaser.yml

@@ -0,0 +1,36 @@
+before:
+  hooks:
+    - go mod tidy
+builds:
+  - binary: api
+    env:
+      - CGO_ENABLED=0
+    goos:
+      - linux
+      - windows
+      - darwin
+
+archives:
+  - format: tar.gz
+    # this name template makes the OS and Arch compatible with the results of uname.
+    name_template: >-
+      {{ .ProjectName }}_
+      {{- title .Os }}_
+      {{- if eq .Arch "amd64" }}x86_64
+      {{- else if eq .Arch "386" }}i386
+      {{- else }}{{ .Arch }}{{ end }}
+      {{- if .Arm }}v{{ .Arm }}{{ end }}
+    # use zip for windows archives
+    format_overrides:
+      - goos: windows
+        format: zip
+checksum:
+  name_template: "checksums.txt"
+snapshot:
+  name_template: "{{ incpatch .Version }}-next"
+changelog:
+  sort: asc
+  filters:
+    exclude:
+      - "^docs:"
+      - "^test:"

Dockerfile

@@ -0,0 +1,69 @@
+FROM ghcr.io/libops/go1.25:main@sha256:f43c9b34f888d2ac53e87c8e061554f826b8eb580863d7b21fd787b6f0378f8f AS builder
+
+SHELL ["/bin/ash", "-o", "pipefail", "-ex", "-c"]
+
+WORKDIR /app
+
+COPY go.mod go.sum ./
+COPY proto/ ./proto/
+RUN --mount=type=cache,target=/go/pkg/mod \
+    go mod download
+
+COPY *.go ./
+COPY internal/ ./internal/
+COPY db/ ./db/
+
+RUN --mount=type=cache,target=/root/.cache/go-build \
+    CGO_ENABLED=0 go build -ldflags="-s -w" -o /app/binary .
+
+FROM node:22-alpine AS frontend
+
+WORKDIR /app
+
+# Copy package files and install dependencies
+COPY web/package.json web/package-lock.json ./
+RUN npm ci
+
+# Copy source files and build configuration
+COPY web/src/ ./src/
+COPY web/tsconfig.json web/vite.config.ts web/vite-plugin-proto-resolver.ts ./
+
+# Build the frontend bundle
+RUN npm run build
+
+FROM ubuntu:24.04 AS tailwind
+
+SHELL ["/bin/bash", "-o", "pipefail", "-c"]
+
+WORKDIR /app
+
+RUN apt-get update && apt-get install curl --yes && \
+    curl -sL \
+    https://github.com/tailwindlabs/tailwindcss/releases/download/v4.1.18/tailwindcss-linux-x64 \
+    -o /app/tailwindcss && \
+    chmod +x /app/tailwindcss
+
+COPY web/ ./web/
+# Copy the bundled JavaScript from frontend stage
+COPY --from=frontend /app/static/js/main.bundle.js ./web/static/js/main.bundle.js
+
+RUN /app/tailwindcss \
+    -i ./web/static/css/input.css \
+    -o ./web/static/css/output.css \
+    --content './web/templates/**/*.html,./web/src/**/*.ts' \
+    --minify
+
+
+FROM ghcr.io/libops/go1.25:main@sha256:f43c9b34f888d2ac53e87c8e061554f826b8eb580863d7b21fd787b6f0378f8f
+
+WORKDIR /app
+COPY --from=builder /app/binary /app/binary
+COPY web/ ./web/
+COPY --from=tailwind /app/web/static/css/output.css ./web/static/css/output.css
+COPY --from=frontend /app/static/js/main.bundle.js ./web/static/js/main.bundle.js
+
+COPY openapi/ ./openapi/
+
+EXPOSE 8080
+
+HEALTHCHECK CMD /bin/bash -c 'curl -sf http://localhost:8080/health'