Enkihost Documentation

# syntax = docker/dockerfile:1

# 1. Base image with Ruby
ARG RUBY_VERSION=3.3.5
FROM ruby:$RUBY_VERSION-slim AS base

WORKDIR /rails

# Set production environment variables
ENV RAILS_ENV="production" \
    BUNDLE_DEPLOYMENT="1" \
    BUNDLE_PATH="/usr/local/bundle" \
    BUNDLE_WITHOUT="development:test"

# Install base packages (libpq for PostgreSQL, curl for healthcheck)
RUN apt-get update -qq && \
    apt-get install --no-install-recommends -y curl libpq-dev libjemalloc2 && \
    rm -rf /var/lib/apt/lists /var/cache/apt/archives

# Enable jemalloc for reduced memory fragmentation in Ruby
ENV LD_PRELOAD="/usr/lib/x86_64-linux-gnu/libjemalloc.so.2"

# 2. Build stage for gems and asset precompilation
FROM base AS build

# Install build tools for native gem extensions (e.g. pg, nokogiri)
RUN apt-get update -qq && \
    apt-get install --no-install-recommends -y build-essential git pkg-config && \
    rm -rf /var/lib/apt/lists /var/cache/apt/archives

# Install application gems
COPY Gemfile Gemfile.lock ./
RUN bundle install && \
    rm -rf ~/.bundle/ "${BUNDLE_PATH}"/ruby/*/cache "${BUNDLE_PATH}"/ruby/*/bundler/gems/*/.git

# Copy application code
COPY . .

# Precompile assets without requiring a live database connection
RUN SECRET_KEY_BASE_DUMMY=1 ./bin/rails assets:precompile

# 3. Final execution stage
FROM base

# Run as non-root user for maximum container security
RUN useradd rails --create-home --shell /bin/bash && \
    chown -R rails:rails /rails

COPY --chown=rails:rails --from=build /usr/local/bundle /usr/local/bundle
COPY --chown=rails:rails --from=build /rails /rails

USER rails:rails

# Expose port (configured via ENV or defaults to 3000)
EXPOSE 3000
ENV PORT=3000

# Start Puma web server
CMD ["./bin/thrust", "./bin/rails", "server"]

# syntax = docker/dockerfile:1
FROM ruby:3.3-slim

WORKDIR /app

ENV RACK_ENV="production" \
    BUNDLE_DEPLOYMENT="1" \
    BUNDLE_PATH="/usr/local/bundle" \
    BUNDLE_WITHOUT="development:test"

# Install dependencies (libpq-dev for postgres, build-essential for native gems)
RUN apt-get update -qq && \
    apt-get install --no-install-recommends -y build-essential libpq-dev curl && \
    rm -rf /var/lib/apt/lists /var/cache/apt/archives

# Copy dependency definitions
COPY Gemfile Gemfile.lock ./
RUN bundle install

# Copy application code
COPY . .

# Run as non-root user
RUN useradd -m sinatra && chown -R sinatra:sinatra /app
USER sinatra

EXPOSE 4567
ENV PORT=4567

# Launch via bundle exec puma or rackup
CMD ["bundle", "exec", "puma", "-p", "4567", "-e", "production"]

# 1. Build stage: compile static site with Jekyll
FROM ruby:3.3-alpine AS builder

WORKDIR /srv/jekyll

RUN apk add --no-cache build-base gcc cmake git

COPY Gemfile Gemfile.lock ./
RUN bundle install

COPY . .
ENV JEKYLL_ENV=production
RUN bundle exec jekyll build --destination /srv/jekyll/_site

# 2. Production stage: serve with high-performance Nginx
FROM nginx:alpine

# Copy compiled static HTML/CSS/JS to webroot
COPY --from=builder /srv/jekyll/_site /usr/share/nginx/html

# Custom nginx config for SPA routing and caching if needed
RUN printf "server {\n\
    listen 80;\n\
    server_name localhost;\n\
    location / {\n\
        root /usr/share/nginx/html;\n\
        index index.html index.htm;\n\
        try_files \$uri \$uri/ /index.html;\n\
    }\n\
}\n" > /etc/nginx/conf.d/default.conf

EXPOSE 80
CMD ["nginx", "-g", "daemon off;"]

version: "3.8"

services:
  # 1. Main Web Application
  web:
    build:
      context: .
      dockerfile: Dockerfile
    restart: unless-stopped
    ports:
      - "3000:3000"
    environment:
      - RAILS_ENV=production
      - PORT=3000
      - DATABASE_URL=postgres://enkihost:securepassword123@db:5432/my_app_production
      - REDIS_URL=redis://redis:6379/0
      - SECRET_KEY_BASE=${SECRET_KEY_BASE}
      - RAILS_MASTER_KEY=${RAILS_MASTER_KEY}
    depends_on:
      db:
        condition: service_healthy
      redis:
        condition: service_healthy
    networks:
      - enkihost-network

  # 2. Managed PostgreSQL Database
  db:
    image: postgres:16-alpine
    restart: unless-stopped
    environment:
      POSTGRES_USER: enkihost
      POSTGRES_PASSWORD: securepassword123
      POSTGRES_DB: my_app_production
    volumes:
      - postgres_data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U enkihost -d my_app_production"]
      interval: 5s
      timeout: 5s
      retries: 5
    networks:
      - enkihost-network

  # 3. Managed Redis Cache & Queue
  redis:
    image: redis:7-alpine
    restart: unless-stopped
    command: ["redis-server", "--appendonly", "yes"]
    volumes:
      - redis_data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 5s
      timeout: 3s
      retries: 5
    networks:
      - enkihost-network

volumes:
  postgres_data:
    driver: local
  redis_data:
    driver: local

networks:
  enkihost-network:
    driver: bridge