Adjusted dockerfile. Created sops config file

Author: anders88

Dockerfile

@@ -1,15 +1,37 @@
-# Fetch the application jar from the target directory and rename it to application.jar
-FROM amazoncorretto:21-al2023-headless AS fetch
+# Build: docker build -t moresleep-app:latest .
+# Run: docker run  --name moresleep-container -p 5000:5000 moresleep-app:latest
+# Check localhost:5000 and you should get a homepage
+# Stage 1: Build the application
+FROM maven:3.9.11-eclipse-temurin-21 AS build
+WORKDIR /app
+COPY pom.xml .
+COPY src ./src
+RUN mvn clean package -Dmaven.test.skip=true
 
-COPY target /target
-RUN mv /target/*-with-dependencies.jar /target/application.jar
+# Stage 2: Create the final runtime image
+FROM eclipse-temurin:21-jre-jammy AS final
 
+# Install SOPS
+RUN curl -L -o /usr/local/bin/sops https://github.com/getsops/sops/releases/download/v3.10.2/sops-v3.10.2.linux.amd64 && \
+    chmod +x /usr/local/bin/sops
 
-# Actual image to run the application
-FROM amazoncorretto:21-al2023-headless
+    # Install unzip and curl
+RUN apt-get update && \
+    apt-get install -y curl unzip && \
+    rm -rf /var/lib/apt/lists/*
 
-EXPOSE 8081
+    # Install AWS CLI v2
+RUN curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "/tmp/awscliv2.zip" && \
+    unzip /tmp/awscliv2.zip -d /tmp && \
+    /tmp/aws/install && \
+    rm -rf /tmp/aws /tmp/awscliv2.zip
 
-COPY --from=fetch /target/application.jar /work/application.jar
+WORKDIR /app
+COPY --from=build /app/target/cake-redux-0.3-SNAPSHOT-jar-with-dependencies.jar app.jar
+COPY ./config/.enc.prod.env /app/.enc.env
 
-ENTRYPOINT ["java", "-jar", "/work/application.jar"]
+# Remove AWS profile from SOPS config to use container's AWS credentials
+RUN sed -i 's/sops_kms__list_0__map_aws_profile=javabin/sops_kms__list_0__map_aws_profile=/' /app/.enc.env
+
+EXPOSE 5000
+ENTRYPOINT ["sops", "exec-env", ".enc.env", "java -jar app.jar"]

config/.enc.prod.env

@@ -0,0 +1,24 @@
+cakeLocation=ENC[AES256_GCM,data:ioJyOZg6Fdm5m5XJ95UbfKIIdxUEi8mHLjHhFKDD,iv:v49r9/3pv/KE7nUZ+QbPyNSHgMijqe3nyufMMbW5cf8=,tag:MuFYsy920rbwyDlKzezYew==,type:str]
+noAuthMode=ENC[AES256_GCM,data:c5YaRjE=,iv:oK8ESqtGxExZ/E/acCfWmEGl9fMYkVNSz0Hf6uGw4cs=,tag:yzB0PIx7Fq3qqQnBPNYuHQ==,type:str]
+serverPort=ENC[AES256_GCM,data:gs/+mw==,iv:PY8p7I7tC7r/VnAOHcyj+pF6a6uRateyNpAIQudWjwU=,tag:PWxdGXnncrEFzSKGH+KdTA==,type:str]
+mailSenderImplementation=ENC[AES256_GCM,data:QdHQaYHcUio=,iv:SLMRY7H6Cq2sNFevKe3lIREiFXoq6RBXvVxiSYOfRLg=,tag:RILEScjC6+ulJ5s7xXc9Ow==,type:str]
+sendGridKey=ENC[AES256_GCM,data:/7dlTaGmOEzNMGhmAd8pmxZ0gFDmadqNlsbskYxGjYW8lZW52vEE9kmMQ8HTdWGrgwjBRJpj7PKe+fwlBaNQPp4Y8XT1,iv:M9sUzpBrq/kzU9hhWrVQHcC6hbkbAcV3slFlMO6CGeE=,tag:V9mg/39mqgOo/YBpNa1C9w==,type:str]
+sleepingPillBaseLocation=ENC[AES256_GCM,data:dB5qjKJM4aemBw8mTdPAkKVrWlgNiABPrJ0n857hSkA=,iv:6Qzo0HGMISA+tCUZo/UoKgDX/1jK/lpoNI1e1x9RBmE=,tag:0rfN9qD1XgQGWgj81Tilxg==,type:str]
+sleepingpillUser=ENC[AES256_GCM,data:auAdLw==,iv:zHGcdL9PcAMLnVRQ0OeGL2x/7vgldpils8F416yNPkM=,tag:NlUT99zZRbY8b069C3wxwQ==,type:str]
+sleepingpillPassword=ENC[AES256_GCM,data:7SrAyXo1Ccq56jne,iv:Rjmi2ec1i5YjgggdjnHC6PeQRe2ZPtHfrfMuK1/Aqy0=,tag:bpBy1RO66tlf+muZAb0wIw==,type:str]
+fullUsers=ENC[AES256_GCM,data:D/dGRu5SJa6m3hOQ8SQ=,iv:cLda1Q8zgmnxJWCCzFYYTWW0R5Af0FHrsC9UNs5COVI=,tag:3aykNSQ0X9cZqs5GdLS7qQ==,type:str]
+videoAdminPassword=ENC[AES256_GCM,data:X8KMwr6s6hAbyTVJ,iv:rt0zLvDMAR2B2rWn8EXg/CxNo2p93YTzzIkCQc76URs=,tag:us+CmdFZwQbvUQgMgZ0xpw==,type:str]
+videoAdminConference=ENC[AES256_GCM,data:Nmx+XQPUIVBolqEnXMRhdwxzyILRU68R3CoB90q3iCcQ0F13,iv:vyyjDX+Q4qBhovwooqcyqcUtUM5uZpNBpk8wAD/LtZY=,tag:dtW9rqe9CTpxgmlgaGNZQg==,type:str]
+slackAppId=ENC[AES256_GCM,data:UOwEd7gjr8Y7rzbDpq2z4gnH2KGGnK0=,iv:8x0xaJbzHwxkoz2qsEMYtDkLC3AWWvKEJnWStYGQTBQ=,tag:Q4EK4ywSAH84wJBVUEebEw==,type:str]
+slackClientSecret=ENC[AES256_GCM,data:kpZxC/tfuBC/5X7fdVFuWMFzPUviw7HrvY2TGEHv2tc=,iv:NCNBgrU2jtJa2LNyzi8RjALJZL25DqJcBr5A+gtGWuE=,tag:7Bdbi7JZaJXiZ6rrzgV7GQ==,type:str]
+slackAuthChannel=ENC[AES256_GCM,data:nOxmftisQY5a,iv:5e9RADRFSgLZsX7sUh1V7hVUNkz9n4ffKRdxaxJ64Xc=,tag:Tr0PaWzMlDsVnisTzXYN2w==,type:str]
+slackApiToken=ENC[AES256_GCM,data:nca+x4j7JwaQKfxDxgWZ1lOan2vGgZ7Uvw/ro0wF6ONmnvrU3F7a1iotbdLs/H5FZb/tZeHmmU5tkScM7FCr29G/fLuSWcc/,iv:ePPL8jEBHHvBGNhwQK3171XxtPQ6ddNaQHa82EH7kGc=,tag:2SyR2qCikFx+VDBL/RLKdg==,type:str]
+conferenceWednesday=ENC[AES256_GCM,data:lsoraE64rzSq0g==,iv:H/BpxrAO/WGrjXCaeOUZ90R0h+ITXndhTn3ikG/2Gz4=,tag:xiBTltsQDpTO1g8FgrxP5w==,type:str]
+sops_kms__list_0__map_arn=arn:aws:kms:eu-central-1:553637109631:key/a6a46dc7-d14e-4638-b3bb-b919aa251296
+sops_kms__list_0__map_aws_profile=javabin
+sops_kms__list_0__map_created_at=2025-10-04T07:26:47Z
+sops_kms__list_0__map_enc=AQICAHgZkjtcSytIpxYRtaElneeEBKhzfRCADUc3yHgqWJe8kwFe8g4OG6dzFCn8R2ias5zzAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMK5mQjczoXx6jhl0GAgEQgDu0XLIkQzN0xzMnk6Ughu/fLj/DOavqrPf93b7P+G88fvExdbTZcHmnR8Frl32fADpVEoR2E0QVSSBSwA==
+sops_lastmodified=2025-10-04T07:26:48Z
+sops_mac=ENC[AES256_GCM,data:/5I3Buq5tzxTrMvM/XOehqdL+ruYl/GggaRMDqUKlTH6Tb1FW/1qvPynegLaP+e00d/SHItuSrRgA/R0iZ+HDEO9LwxOGhCxswYeDgqMSXMOXUI9T+HNzrwIlZDILcu/xCU3M7O3tr2SlR3lHIUHvfdLpg9/x9Gsm7SGV7kYiEc=,iv:vwmBcU8cmTzuSZjp0Dz/lq6UmOpRsWZCizhFWsQPGIM=,tag:BnkxEnSThyW4ShWyyABrTQ==,type:str]
+sops_unencrypted_suffix=_unencrypted
+sops_version=3.10.2

src/main/java/no/javazone/cake/redux/Configuration.java

@@ -49,7 +49,7 @@ private static String readConf(String prop, String env, String defaultValue) {
     private synchronized void loadProps() {
         Map<String,String> readProps = new HashMap<>();
         String filename = System.getProperty("cake-redux-config-file");
-        if (!filename.equals("env-only")) {
+        if (filename != null && !filename.equals("env-only")) {
             String config = readConfigFile(filename);
             for (String line : config.split("\n")) {
                 if (line.startsWith("#")) {

src/main/java/no/javazone/cake/redux/WebServer.java

@@ -26,12 +26,12 @@ public WebServer(Integer port) {
     public static void main(String[] args) throws Exception {
         System.out.println("Starting cakeredux: " + Arrays.toString(args));
         try {
-            if (args == null || args.length < 1) {
-                System.out.println("Usage WebServer <Config file name> [war-file-path]");
-                return;
+            if (args != null && args.length > 0) {
+                System.setProperty("cake-redux-config-file", args[0]);
+            } else {
+                System.out.println("No config file specified");
             }
 
-            System.setProperty("cake-redux-config-file", args[0]);
             new WebServer(getPort(8081)).start();
         } catch (Exception ex) {
             ex.printStackTrace();