c502a42f17
- Extract OidcProviderHelper for shared discovery + JWK source construction - Add SystemRole.normalizeScope() to centralize role normalization - Merge duplicate claim extraction in OidcTokenExchanger - Add PKCE (S256) to OIDC authorization flow (frontend + backend) - Add SecurityContext (runAsNonRoot) to all K8s deployments - Fix postgres probe to use $POSTGRES_USER instead of hardcoded username - Remove default credentials from Dockerfile - Extract sanitize_branch() to shared .gitea/sanitize-branch.sh - Fix sidebar to use /exchanges/ paths directly, remove legacy redirects - Centralize basePath computation in router.tsx via config module Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
24 lines
863 B
Docker
24 lines
863 B
Docker
FROM --platform=$BUILDPLATFORM maven:3.9-eclipse-temurin-17 AS build
|
|
WORKDIR /build
|
|
|
|
# Configure Gitea Maven Registry for cameleer3-common dependency
|
|
ARG REGISTRY_TOKEN
|
|
RUN mkdir -p ~/.m2 && \
|
|
echo '<settings><servers><server><id>gitea</id><username>cameleer</username><password>'${REGISTRY_TOKEN}'</password></server></servers></settings>' > ~/.m2/settings.xml
|
|
|
|
COPY pom.xml .
|
|
COPY cameleer3-server-core/pom.xml cameleer3-server-core/
|
|
COPY cameleer3-server-app/pom.xml cameleer3-server-app/
|
|
# Cache deps — only re-downloaded when POMs change
|
|
RUN mvn dependency:go-offline -B || true
|
|
COPY . .
|
|
RUN mvn clean package -DskipTests -U -B
|
|
|
|
FROM eclipse-temurin:17-jre
|
|
WORKDIR /app
|
|
COPY --from=build /build/cameleer3-server-app/target/cameleer3-server-app-*.jar /app/server.jar
|
|
|
|
EXPOSE 8081
|
|
ENV TZ=UTC
|
|
ENTRYPOINT exec java -Duser.timezone=UTC -jar /app/server.jar
|