Feat--Add-Dockerfile-and-update

[theepicsaxguy]

Overview

containerization and Kubernetes-ready deployment for JMAP Webmail with:

• Multi-stage Docker image optimized for Next.js production
• Environment-driven configuration (no hardcoded values)
• Structured logging system with text/JSON output
• Automated CI/CD with GitHub Actions to GHCR
• Complete Kubernetes deployment manifests with security best practices

Key Changes

Docker & Container Image

• Dockerfile: Multi-stage build (Node 22 Alpine) with:

  • Non-root user execution (UID/GID 1001)
  • Pinned npm version (11.7.0) for lock file consistency
  • Health checks via /api/health endpoint
  • 512MB Node.js heap allocation for Next.js
  • Container security labels and metadata

• .dockerignore: Excludes build artifacts, git, node_modules for minimal image size

• docker-compose.yml: Complete local testing environment with:

  • 95+ lines of inline environment variable documentation
  • Health check configuration
  • Memory allocation and logging setup
  • Non-root user enforcement

Configuration (No Hardcoded Values)

• .env.example: Comprehensive documentation of all 40+ environment variables:

  • JMAP_SERVER_URL (required)
  • APP_NAME, NODE_ENV, PORT, HOSTNAME
  • TZ/TIMEZONE (replaced hardcoded Europe/Paris)
  • HEALTH_MEMORY_WARNING_THRESHOLD, HEALTH_MEMORY_CRITICAL_THRESHOLD
  • LOG_LEVEL (error/warn/info/debug), LOG_FORMAT (text/json)
  • NODE_OPTIONS for memory control

• i18n/request.ts: Timezone now uses env vars instead of hardcoded 'Europe/Paris'

Structured Logging

• lib/logger.ts: New utility providing:

  • Configurable LOG_LEVEL (error/warn/info/debug)
  • LOG_FORMAT support (text for humans, json for log aggregation)
  • Request logging helpers
  • Colored output for development

• lib/server-init.ts: Startup logging showing:

  • Full configuration on boot
  • Warnings if JMAP_SERVER_URL not set
  • Health check threshold settings
  • Node.js version and environment details

• api/health/route.ts: Enhanced with:

  • Configurable memory thresholds
  • Structured error/warning logging
  • Detailed memory usage reporting

• api/config/route.ts: Added logging for debugging

• app/layout.tsx: Imported server-init for startup logging

Kubernetes Deployment

• kubernetes-deployment.yaml: Production-ready manifests:
  • Secret for JMAP_SERVER_URL
  • ConfigMap for non-sensitive configuration
  • Deployment with 2 replicas, rolling updates
  • Health probes (liveness/readiness/startup)
  • Resource limits (100m CPU/256Mi memory request, 500m/512Mi limits)
  • Security context (non-root, CAP_DROP=ALL)
  • Service (ClusterIP) and Ingress configuration
  • HorizontalPodAutoscaler (2-10 replicas on CPU/memory)

GitHub Actions CI/CD

• .github/workflows/docker-build.yml: Automated Docker builds:
  • Triggers: PRs with path filters (only on relevant file changes)
  • Release trigger for version tagging
  • Multi-platform builds (linux/amd64, linux/arm64)
  • SBOM + Provenance attestations for security scanning
  • Smart tagging strategy:
    • PRs: pr-{number}, sha-{commit}
    • Releases: 1.2.3, 1.2, 1, latest, sha-{commit}
  • GitHub Actions cache for faster builds
  • GHCR login with GITHUB_TOKEN (no PAT needed)
  • Conditional push (builds on PR without pushing)

Documentation

• DOCKER.md: 300+ lines covering:

  • Quick start with docker-compose
  • GitHub Actions CI/CD workflow explanation
  • Release triggering process
  • Kubernetes deployment guide
  • Health check configuration
  • Logging setup and examples
  • Performance tuning
  • Troubleshooting

• GHCR.md: 250+ lines covering:

  • GitHub Container Registry setup
  • PAT creation and authentication
  • Kubernetes image pull secrets
  • Image reference patterns
  • Complete deployment examples
  • Security considerations

Dependencies Updated

• Next.js: 16.0.8 → 16.1.2
• React: 19.2.1 → 19.2.3
• next-intl: 4.5.8 → 4.7.0
• Tailwind CSS: 4.1.17 → 4.1.18
• eslint-config-next: 16.0.8 → 16.1.2

Version Bump

• package.json: 0.1.0 → 1.0.0 (first stable release)
• Removed turbopack from build script for production stability