use environment variables on runtime

.docker/Dockerfile

@@ -0,0 +1,121 @@
+ARG NODE_MAJOR_VERSION=20
+
+FROM ubuntu:noble AS base
+
+ARG NODE_MAJOR_VERSION
+
+ENV PYTHONUNBUFFERED=1
+ENV PYTHONDONTWRITEBYTECODE=1
+ENV DEBIAN_FRONTEND=noninteractive
+ENV TZ=UTC
+
+RUN mkdir -p /app/backend app/front-end/dist && chown -R ubuntu:ubuntu /app
+WORKDIR /app
+
+RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
+    --mount=type=cache,target=/var/lib/apt,sharing=locked \
+    apt-get -qq update && apt-get -qq install -y --no-install-recommends \
+        ca-certificates \
+        curl \
+        gnupg \
+        python3.12 \
+        binutils \
+        gdal-bin \
+        libproj-dev \
+        libpq5 \
+        nano \
+        gettext
+
+RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
+    --mount=type=cache,target=/var/lib/apt,sharing=locked \
+    curl -fsSL https://deb.nodesource.com/setup_${NODE_MAJOR_VERSION}.x | bash - && \
+    apt-get -qq install -y nodejs
+
+COPY .docker/entrypoint.sh /usr/local/bin/entrypoint.sh
+COPY .docker/update.sh /usr/local/bin/rga-update
+
+ENTRYPOINT ["/bin/sh", "-e", "/usr/local/bin/entrypoint.sh"]
+
+FROM base AS build
+
+ENV NODE_ENV=development
+ARG NODE_MAJOR_VERSION
+
+RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
+    --mount=type=cache,target=/var/lib/apt,sharing=locked \
+    apt-get -qq update && apt-get -qq install -y --no-install-recommends \
+        git \
+        python3.12-dev \
+        python3.12-venv \
+        build-essential \
+        libpq-dev
+
+USER ubuntu
+
+COPY --chown=ubuntu:ubuntu front-end/ /app/front-end
+
+WORKDIR /app/front-end
+
+RUN npm ci --no-audit
+
+WORKDIR /app
+
+RUN --mount=type=cache,target=/home/ubuntu/.cache/pip,sharing=locked python3.12 -m venv /app/venv &&  \
+    /app/venv/bin/pip install --upgrade pip wheel setuptools
+COPY backend/requirements.txt /app/requirements.txt
+RUN --mount=type=cache,target=/home/ubuntu/.cache/pip,sharing=locked  \
+    /app/venv/bin/pip install -r /app/requirements.txt
+
+FROM build AS dev
+
+COPY backend/dev-requirements.txt /app/dev-requirements.txt
+RUN --mount=type=cache,target=/home/ubuntu/.cache/pip,sharing=locked,uid=1,gid=1  \
+    /app/venv/bin/pip install -r /app/dev-requirements.txt
+
+WORKDIR /app/backend
+
+CMD ["/app/venv/bin/python", "manage.py", "runserver", "0.0.0.0:8000"]
+
+FROM base AS prod
+
+ENV NODE_ENV=production
+
+WORKDIR /app/backend
+
+USER root
+RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
+    --mount=type=cache,target=/var/lib/apt,sharing=locked \
+    apt-get -qq update && apt-get -y full-upgrade
+
+USER ubuntu
+
+COPY --chown=ubuntu:ubuntu front-end/package-lock.json /app/front-end/package-lock.json
+COPY --chown=ubuntu:ubuntu front-end/package.json /app/front-end/package.json
+
+WORKDIR /app/front-end
+
+RUN npm ci --no-audit --only=production
+
+COPY --chown=ubuntu:ubuntu --from=build /app/venv /app/venv
+COPY --chown=ubuntu:ubuntu --from=build /app/front-end/dist /app/front-end/dist
+COPY --chown=ubuntu:ubuntu backend/project/ /app/backend/project
+COPY --chown=ubuntu:ubuntu backend/manage.py /app/backend/manage.py
+
+WORKDIR /app/backend
+
+RUN SECRET_KEY=temp /app/venv/bin/python ./manage.py compilemessages
+
+CMD ["gunicorn", "project.wsgi:application", "--bind", "0.0.0.0:8000"]
+
+FROM base AS front-dev
+
+WORKDIR /app/front-end
+
+USER ubuntu
+
+COPY --chown=ubuntu:ubuntu front-end/ /app/front-end
+COPY --chown=ubuntu:ubuntu --from=build /app/front-end/node_modules /app/front-end/node_modules
+
+ENTRYPOINT [""]
+
+CMD ["npx", "ng", "serve", "--host", "0.0.0.0"]

.docker/app.env

@@ -0,0 +1 @@
+TZ=Europe/Paris

.docker/db.env

@@ -0,0 +1,3 @@
+POSTGRES_USER=postgres
+POSTGRES_PASSWORD=postgres
+POSTGRES_DB=postgres

.docker/entrypoint.sh

@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+
+# Activate venv
+. /app/venv/bin/activate
+
+# exec
+exec "$@"

.docker/update.sh

@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+
+# Migrate database
+python ./manage.py migrate --noinput
+
+# Collect static files
+python ./manage.py collectstatic --noinput

.dockerignore

@@ -0,0 +1,2 @@
+/front-end/node_modules/
+/front-end/.vscode/

.env.dist

@@ -0,0 +1,6 @@
+UID=1000
+GID=1000
+NGINX_PORT=8080
+BACKEND_PORT=8000
+NODE_PORT=3000
+POSTGRES_PORT=5432

.github/dependabot.yml

@@ -0,0 +1,24 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/" # Location of package manifests
+    schedule:
+      interval: "weekly"
+
+  - package-ecosystem: "pip"
+    directory: "backend/" # Location of package manifests
+    schedule:
+      interval: "weekly"
+    ignore:
+      - dependency-name: "django"
+        update-types: [ "version-update:semver-major", "version-update:semver-minor" ]  # only allow auto update on django bug and security fixes
+
+  - package-ecosystem: "npm"
+    directory: "front-end/" # Location of package manifests
+    schedule:
+      interval: "weekly"

.github/release.yml

@@ -0,0 +1,22 @@
+changelog:
+  categories:
+    - title: 🎉 Features
+      labels:
+        - '*'
+      exclude:
+        labels:
+          - dependencies
+          - Bug
+          - documentation
+
+    - title: 🛠 Bug fixes
+      labels:
+        - 'Bug'
+
+    - title: 📘 Documentation
+      labels:
+        - documentation
+
+    - title: ⤴ Dependencies
+      labels:
+        - dependencies

.github/workflows/quality.yml

@@ -0,0 +1,116 @@
+name: Quality checks
+
+on:
+  pull_request:
+  push:
+    branches:
+      - master
+      - main
+      - next
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+env:
+  DEBIAN_FRONTEND: noninteractive
+
+jobs:
+    flake8:
+        name: Python Flake8 check
+        runs-on: ubuntu-latest
+        steps:
+            - uses: actions/checkout@v4
+            - uses: actions/setup-python@v5
+              with:
+                  python-version-file: ./backend/.python-version
+
+            - name: Install flake8
+              working-directory: ./backend
+              run: |
+                pip install flake8 -c dev-requirements.txt
+
+            - name: Flake8
+              working-directory: ./backend
+              run: |
+                flake8 project
+
+    isort:
+        name: Python iSort check
+        runs-on: ubuntu-latest
+        steps:
+            - uses: actions/checkout@v4
+            - uses: actions/setup-python@v5
+              with:
+                  python-version-file: ./backend/.python-version
+
+            - name: Install isort
+              working-directory: ./backend
+              run: |
+                pip install isort -c dev-requirements.txt
+
+            - name: iSort
+              working-directory: ./backend
+              run: |
+                isort -c project
+
+    black:
+        name: Python Black check
+        runs-on: ubuntu-latest
+        steps:
+            - uses: actions/checkout@v4
+            - uses: actions/setup-python@v5
+              with:
+                  python-version-file: ./backend/.python-version
+
+            - name: Install black
+              working-directory: ./backend
+              run: |
+                pip install black -c dev-requirements.txt
+
+            - name: black
+              working-directory: ./backend
+              run: |
+                black --check project
+
+    prettier:
+        name: JS Prettier check
+        runs-on: ubuntu-latest
+        steps:
+            - uses: actions/checkout@v4
+            - uses: actions/setup-node@v4
+              with:
+                  node-version-file: ./front-end/.nvmrc
+                  cache: 'npm'
+                  cache-dependency-path: ./front-end/.nvmrc
+
+            - name: Install node dependencies
+              working-directory: ./front-end
+              run: |
+                npm ci --no-audit
+
+            - name: Prettier check
+              working-directory: ./front-end
+              run: |
+                npm run format:check
+
+    type:
+        name: JS Type check
+        runs-on: ubuntu-latest
+        steps:
+            - uses: actions/checkout@v4
+            - uses: actions/setup-node@v4
+              with:
+                  node-version-file: ./front-end/.nvmrc
+                  cache: 'npm'
+                  cache-dependency-path: ./front-end/.nvmrc
+
+            - name: Install node dependencies
+              working-directory: ./front-end
+              run: |
+                npm ci --no-audit
+
+            - name: Type check
+              working-directory: ./front-end
+              run: |
+                npm run type:check