Suppression packages build

build/node.dockerfile

@@ -1,16 +1,21 @@
 # Starting from node
-FROM node:22-alpine
+FROM node:22-slim
 
 ENV NODE_ENV=production
 
 WORKDIR /app
 
-RUN apk add --no-cache ffmpeg python3 make g++
+# Copy package files first
-
-# Copy package files and install only production dependencies
 COPY package.json package-lock.json* .
-RUN npm ci --only=production --ignore-scripts && \
+
-    npm install bufferutil zlib-sync
+# Install build dependencies, compile native modules, then remove build tools
+RUN apt-get update && \
+    apt-get install -y ffmpeg python3 make g++ && \
+    npm ci --only=production --ignore-scripts && \
+    npm install bufferutil zlib-sync && \
+    apt-get remove -y python3 make g++ && \
+    apt-get autoremove -y && \
+    rm -rf /var/lib/apt/lists/*
 
 # Copy the builded files and the charts
 COPY ./dist/* .

deploy/templates/ingress.yaml

@@ -0,0 +1,32 @@
+{{- if .Values.ingress.enabled }}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ .Release.Name }}
+  annotations:
+    external-dns.alpha.kubernetes.io/target: omegamaestro.{{ .Values.ingress.domain }}
+    cert-manager.io/cluster-issuer: {{ .Values.ingress.issuer }}
+    nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
+    {{- if .Values.ingress.geoip }}
+    nginx.ingress.kubernetes.io/server-snippet: |
+      if ($lan = yes) { set $allowed_country yes; }
+      if ($allowed_country = no) { return 451; }
+    {{- end }}
+spec:
+  ingressClassName: {{ .Values.ingress.class }}
+  tls:
+  - hosts:
+    - {{ .Values.ingress.subdomain }}.{{ .Values.ingress.domain }}
+    secretName: {{ .Release.Name }}-tls
+  rules:
+  - host: "{{ .Values.ingress.subdomain }}.{{ .Values.ingress.domain }}"
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: "{{ .Release.Name }}-{{ .Values.service.name }}"
+            port:
+              name: {{ .Values.service.name }}
+{{- end }}

deploy/templates/service.yaml

@@ -0,0 +1,15 @@
+{{- if .Values.service.enabled }}
+apiVersion: v1
+kind: Service
+metadata:
+  name: "{{ .Release.Name }}-{{ .Values.service.name }}"
+spec:
+  type: {{ .Values.service.type }}
+  ports:
+    - name: {{ .Values.service.name }}
+      port: {{ .Values.deployment.env.TWURPLE_PORT | default .Values.service.port }}
+      targetPort: {{ .Values.deployment.env.TWURPLE_PORT | default .Values.service.port }}
+      protocol: TCP
+  selector:
+    {{ .Release.Name }}
+{{- end }}

deploy/values.yaml

@@ -3,7 +3,7 @@ deployment:
   strategy: RollingUpdate
   image:
     repository: "rgy.angels-dev.fr/prod/bot_tamiseur"
-    tag: "4.0.0"
+    tag: "build_2025-06-10_01h49"
     pullPolicy: IfNotPresent
   env:
     NODE_ENV: "production"
@@ -16,3 +16,16 @@ deployment:
     requests:
       Cpu: "0.1"
       Memory: "50Mi"
+
+service:
+  enabled: true
+  type: ClusterIP
+  name: twurple
+
+ingress:
+  enabled: true
+  class: nginx
+  subdomain: dcb-chantier.prd
+  domain: angels-dev.fr
+  issuer: letsencrypt-prod
+  geoip: false