(add): Docker deployments

.gitignore

@@ -0,0 +1 @@
+deployments/

api/.dockerignore

@@ -0,0 +1,2 @@
+__pycache__/
+*/__pycache__/

api/Dockerfile

@@ -0,0 +1,9 @@
+FROM python:3-slim
+WORKDIR /app
+COPY app/requirements.txt .
+RUN pip install -r requirements.txt
+COPY app/. .
+RUN mkdir -p /data
+ENV TAM_DATA_DIR=/data
+ENV NODE_TLS_REJECT_UNAUTHORIZED=0
+CMD ["fastapi", "run", "--port=8000"]

api/app/main.py

@@ -1,7 +1,9 @@
+import os
 from dataclasses import dataclass
+
+import uvicorn
 from db import init_db
 from fastapi import FastAPI, Header
-import os
 from routers import imp_routers
 from system.auth import AuthRepo
 
@@ -29,3 +31,6 @@ def get_main_route(tam_key: str = Header("")):
     return MainRoute(authenticated=AuthRepo().check_key(tam_key))
 
 imp_routers(app)
+
+if __name__ == "__main__":
+  uvicorn.run(app, port=8000)

api/app/requirements.txt

@@ -0,0 +1 @@
+fastapi[standard]

client/.dockerignore

@@ -0,0 +1,4 @@
+*
+
+!build/
+!package.json

client/Dockerfile

@@ -0,0 +1,9 @@
+FROM node:24-slim
+WORKDIR /app
+COPY . .
+RUN npm install --omit=dev
+RUN mkdir -p /data
+ENV TAM_DATA_DIR=/data
+ENV NODE_TLS_REJECT_UNAUTHORIZED=0
+ENV BODY_SIZE_LIMIT=Infinity
+CMD ["node", "build"]

client/src/routes/settings/backuprestore/+page.svelte

@@ -109,7 +109,9 @@
 				class="{iS.normal} rounded file:bg-gray-300 file:border file:border-black file:px-2 file:py-1 file:rounded"
 				bind:files={uploadFile}
 			/>
-			<button class={bS.gray} onclick={() => fileUpload('local')}>Upload to Local</button>
+			{#if !remoteServer}
+				<button class={bS.gray} onclick={() => fileUpload('local')}>Upload to Local</button>
+			{/if}
 			{#if remoteServer}
 				<button class={bS.gray} onclick={() => fileUpload('remote')}>Upload to Remote</button>
 			{/if}

deployments/client/docker/build-client.sh

@@ -0,0 +1,8 @@
+# docker compose build
+source ../../version.env
+docker image tag dbob16/tam-client:latest dbob16/tam-client:${TAM_VERSION}
+mkdir -p dist/images
+docker image save dbob16/tam-client:${TAM_VERSION} | gzip > dist/images/tam-client-${TAM_VERSION}.tar.gz
+echo "TAM_VERSION=${TAM_VERSION}" > dist/prod.env
+echo "HOST=127.0.0.1" >> dist/prod.env
+echo "PORT=3000" >> dist/prod.env

deployments/client/docker/compose.yml

@@ -0,0 +1,9 @@
+services:
+  tam-client:
+    build: ../../../client/.
+    image: dbob16/tam-client:latest
+    restart: unless-stopped
+    ports:
+      - "127.0.0.1:3000:3000"
+    volumes:
+      - "./data:/data:Z"

deployments/client/docker/dist/run-client.sh

@@ -0,0 +1,9 @@
+#!/bin/sh
+
+source ./prod.env
+
+if [ -x "$(command -v docker)" ]; then
+  docker run -d --name tam-client --network host --env-file ./prod.env -v tam-data:/data --restart unless-stopped dbob16/tam-client:${TAM_VERSION}
+elif [ -x "$(command -v podman)" ]; then
+  podman run -d --name tam-client --network host --env-file ./prod.env -v tam-data:/data --restart unless-stopped dbob16/tam-client:${TAM_VERSION}
+fi

deployments/server/docker/build-server.sh

@@ -0,0 +1,8 @@
+#!/bin/sh
+
+source ../../version.env
+docker compose build
+docker tag dbob16/tam-server:latest dbob16/tam-server:${TAM_VERSION}
+docker tag dbob16/tam-rp:latest dbob16/tam-rp:${TAM_VERSION}
+echo "TAM_PWD=changeme" > dist/prod.env
+TAM_VERSION=${TAM_VERSION} envsubst '$TAM_VERSION' < ./compose.yml.template > ./dist/compose.yml

deployments/server/docker/compose.yml

@@ -0,0 +1,15 @@
+services:
+  tam-server:
+    build: ../../../api/.
+    image: dbob16/tam-server:latest
+    restart: unless-stopped
+    ports:
+      - "8000:8000"
+  tam-rp:
+    build: ../../../rp/.
+    image: dbob16/tam-rp:latest
+    restart: unless-stopped
+    environment:
+      - "TAM_SERVER=tam-server"
+    ports:
+      - "8443:8443"

deployments/server/docker/compose.yml.template

@@ -0,0 +1,17 @@
+services:
+  tam-server:
+    image: dbob16/tam-server:${TAM_VERSION}
+    restart: unless-stopped
+    environment:
+      - "TAM_PWD=${TAM_PWD}"
+    volumes:
+      - "./data:/data:Z"
+    ports:
+      - "8000:8000"
+  tam-rp:
+    image: dbob16/tam-rp:${TAM_VERSION}
+    restart: unless-stopped
+    environment:
+      - "TAM_SERVER=tam-server"
+    ports:
+      - "8443:8443"

deployments/server/docker/dist/run-server.sh

@@ -0,0 +1,7 @@
+#!/bin/sh
+
+if [ -x "$(command -v docker)" ]; then
+  docker compose --env-file ./prod.env up -d
+elif [ -x "$(command -v podman)"]; then
+  podman compose --env-file ./prod.env up -d
+fi

deployments/server/docker/dist/set-password.sh

@@ -0,0 +1,4 @@
+#!/bin/sh
+
+read -p "Enter new password: " NEW_PASSWORD
+echo "TAM_PWD=${NEW_PASSWORD}" > prod.env

deployments/server/docker/dist/shutdown-server.sh

@@ -0,0 +1,7 @@
+#!/bin/sh
+
+if [ -x "$(command -v docker)" ]; then
+  docker compose --env-file ./prod.env down
+elif [ -x "$(command -v podman)" ]; then
+  podman compose --env-file ./prod.env down
+fi

rp/Caddyfile

@@ -0,0 +1,4 @@
+*:8443 {
+  tls internal
+  reverse_proxy {$TAM_SERVER:localhost}:8000
+}

rp/Dockerfile

@@ -0,0 +1,3 @@
+FROM caddy:2
+COPY Caddyfile /etc/caddy/Caddyfile
+ENV TAM_SERVER=tam-server