Modif apk en apt

.gitea/workflows/build-and-push.yml

@@ -54,27 +54,26 @@ jobs:
         tags: |
           # Tag avec le nom du tag Git
           type=ref,event=tag
+          # Tag 'latest' pour la branche master
+          type=raw,value=latest,enable={{is_default_branch}}
+          # Tag avec le SHA pour les autres branches
+          type=sha,prefix=sha-
         labels: |
           org.opencontainers.image.title=${{ env.IMAGE_NAME }}
-          org.opencontainers.image.description=Bot Discord
-          org.opencontainers.image.url=https://gitea.zac.ovh/zachary/bot_Tamiseur
-          org.opencontainers.image.source=https://gitea.zac.ovh/zachary/bot_Tamiseur
+          org.opencontainers.image.description=Bot Discord de moi
+          org.opencontainers.image.url=https://git.zac.ovh/zachary/bot_Tamiseur
+          org.opencontainers.image.source=https://git.zac.ovh/zachary/bot_Tamiseur
           org.opencontainers.image.revision=${{ github.sha }}
+          org.opencontainers.image.created={{date 'RFC3339'}}
 
     - name: Build and push Docker image
       uses: docker/build-push-action@v5
       with:
         context: .
+        file: build/node.dockerfile
         platforms: linux/amd64,linux/arm64
         push: true
         tags: ${{ steps.meta.outputs.tags }}
         labels: ${{ steps.meta.outputs.labels }}
         cache-from: type=gha
         cache-to: type=gha,mode=max
-
-    - name: Generate artifact attestation
-      uses: actions/attest-build-provenance@v1
-      with:
-        subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_PATH }}/${{ env.IMAGE_NAME }}
-        subject-digest: ${{ steps.build.outputs.digest }}
-        push-to-registry: true

build/node.dockerfile

@@ -1,18 +1,19 @@
 # Starting from node
-FROM node:22-alpine
+FROM node:22-slim
 
 ENV NODE_ENV=production
 
 WORKDIR /app
 
-RUN apk add --no-cache python3 make g++
+RUN apt-get update && \
+    apt-get install -y ffmpeg python3 make g++ && \
+    rm -rf /var/lib/apt/lists/*
 
 # Copy package files and install only production dependencies
 COPY package.json package-lock.json* .
 RUN npm ci --only=production --ignore-scripts && \
     npm install bufferutil zlib-sync
 
-
 # Copy the builded files and the charts
 COPY ./dist/* .
 

deploy/templates/ingress.yaml

@@ -0,0 +1,32 @@
+{{- if .Values.ingress.enabled }}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ .Release.Name }}
+  annotations:
+    external-dns.alpha.kubernetes.io/target: omegamaestro.{{ .Values.ingress.domain }}
+    cert-manager.io/cluster-issuer: {{ .Values.ingress.issuer }}
+    nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
+    {{- if .Values.ingress.geoip }}
+    nginx.ingress.kubernetes.io/server-snippet: |
+      if ($lan = yes) { set $allowed_country yes; }
+      if ($allowed_country = no) { return 451; }
+    {{- end }}
+spec:
+  ingressClassName: {{ .Values.ingress.class }}
+  tls:
+  - hosts:
+    - {{ .Values.ingress.subdomain }}.{{ .Values.ingress.domain }}
+    secretName: {{ .Release.Name }}-tls
+  rules:
+  - host: "{{ .Values.ingress.subdomain }}.{{ .Values.ingress.domain }}"
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: "{{ .Release.Name }}-{{ .Values.service.name }}"
+            port:
+              name: {{ .Values.service.name }}
+{{- end }}

deploy/templates/service.yaml

@@ -0,0 +1,15 @@
+{{- if .Values.service.enabled }}
+apiVersion: v1
+kind: Service
+metadata:
+  name: "{{ .Release.Name }}-{{ .Values.service.name }}"
+spec:
+  type: {{ .Values.service.type }}
+  ports:
+    - name: {{ .Values.service.name }}
+      port: {{ .Values.deployment.env.TWURPLE_PORT | default .Values.service.port }}
+      targetPort: {{ .Values.deployment.env.TWURPLE_PORT | default .Values.service.port }}
+      protocol: TCP
+  selector:
+    {{ .Release.Name }}
+{{- end }}

deploy/values.yaml

@@ -3,7 +3,7 @@ deployment:
   strategy: RollingUpdate
   image:
     repository: "rgy.angels-dev.fr/prod/bot_tamiseur"
-    tag: "4.0.0"
+    tag: "build_2025-06-10_01h49"
     pullPolicy: IfNotPresent
   env:
     NODE_ENV: "production"
@@ -16,3 +16,16 @@ deployment:
     requests:
       Cpu: "0.1"
       Memory: "50Mi"
+
+service:
+  enabled: true
+  type: ClusterIP
+  name: twurple
+
+ingress:
+  enabled: true
+  class: nginx
+  subdomain: dcb-chantier.prd
+  domain: angels-dev.fr
+  issuer: letsencrypt-prod
+  geoip: false