Fix copy chown

build/node.dockerfile

@@ -1,22 +1,34 @@
 # Starting from node
-FROM node:22-alpine
+FROM node:22-slim
 
-ENV NODE_ENV=production
+# Install build dependencies
+RUN apt-get update && \
+    apt-get install -y ffmpeg python3 make g++
 
+# Set the working directory
 WORKDIR /app
+RUN chown node:node ./
+USER node
 
-RUN apk add --no-cache ffmpeg python3 make g++
+# Copy package files first
+COPY --chown=node:node package.json package-lock.json* .
 
-# Copy package files and install only production dependencies
+# Install app dependencies
-COPY package.json package-lock.json* .
+ENV NODE_ENV=production
 RUN npm ci --only=production --ignore-scripts && \
-    npm install bufferutil zlib-sync
+    npm install bufferutil zlib-sync && \
+    npm cache clean --force
 
-# Copy the builded files and the charts
+# Copy the builded files
-COPY ./dist/* .
+COPY --chown=node:node ./dist/* .
 
-# Set the permissions
+# Return to root user to remove build dependencies
-RUN chown -R node:node /app
+USER root
+RUN apt-get remove -y python3 make g++ && \
+    apt-get autoremove -y && \
+    rm -rf /var/lib/apt/lists/*
+
+# Go back to node user
 USER node
 
 # Start the application

deploy/templates/ingress.yaml

@@ -0,0 +1,32 @@
+{{- if .Values.ingress.enabled }}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ .Release.Name }}
+  annotations:
+    external-dns.alpha.kubernetes.io/target: omegamaestro.{{ .Values.ingress.domain }}
+    cert-manager.io/cluster-issuer: {{ .Values.ingress.issuer }}
+    nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
+    {{- if .Values.ingress.geoip }}
+    nginx.ingress.kubernetes.io/server-snippet: |
+      if ($lan = yes) { set $allowed_country yes; }
+      if ($allowed_country = no) { return 451; }
+    {{- end }}
+spec:
+  ingressClassName: {{ .Values.ingress.class }}
+  tls:
+  - hosts:
+    - {{ .Values.ingress.subdomain }}.{{ .Values.ingress.domain }}
+    secretName: {{ .Release.Name }}-tls
+  rules:
+  - host: "{{ .Values.ingress.subdomain }}.{{ .Values.ingress.domain }}"
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: "{{ .Release.Name }}-{{ .Values.service.name }}"
+            port:
+              name: {{ .Values.service.name }}
+{{- end }}

deploy/templates/service.yaml

@@ -0,0 +1,15 @@
+{{- if .Values.service.enabled }}
+apiVersion: v1
+kind: Service
+metadata:
+  name: "{{ .Release.Name }}-{{ .Values.service.name }}"
+spec:
+  selector:
+    pod: {{ .Release.Name }}
+  ports:
+    - name: {{ .Values.service.name }}
+      port: {{ .Values.deployment.env.TWURPLE_PORT | default .Values.service.port }}
+      targetPort: {{ .Values.deployment.env.TWURPLE_PORT | default .Values.service.port }}
+      protocol: TCP
+  type: {{ .Values.service.type }}
+{{- end }}

deploy/values.yaml

@@ -3,7 +3,7 @@ deployment:
   strategy: RollingUpdate
   image:
     repository: "rgy.angels-dev.fr/prod/bot_tamiseur"
-    tag: "4.0.0"
+    tag: "build_2025-06-10_01h49"
     pullPolicy: IfNotPresent
   env:
     NODE_ENV: "production"
@@ -15,4 +15,17 @@ deployment:
       # Memory: "500Mi"
     requests:
       Cpu: "0.1"
-      Memory: "50Mi"
+      Memory: "50Mi"
+
+service:
+  enabled: true
+  type: ClusterIP
+  name: twurple
+
+ingress:
+  enabled: true
+  class: nginx
+  subdomain: dcb-chantier.prd
+  domain: angels-dev.fr
+  issuer: letsencrypt-prod
+  geoip: false