feat: serve frontend from Axum, single unified Docker image

Replace separate backend/frontend containers with a single image.
Axum now serves the Vue frontend via ServeDir fallback, eliminating
the Nginx container. Multi-stage Dockerfile builds both frontend
and backend in one image.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: EstrellaXD

.github/workflows/docker-publish.yml

@@ -41,7 +41,7 @@ jobs:
       - name: Build and push Docker image
         uses: docker/build-push-action@v6
         with:
-          context: ./backend
+          context: .
           platforms: linux/amd64,linux/arm64
           push: true
           tags: ${{ steps.meta.outputs.tags }}

Dockerfile

@@ -0,0 +1,42 @@
+FROM node:20-alpine AS frontend
+
+WORKDIR /build
+COPY frontend/package*.json ./
+RUN npm ci
+COPY frontend/ .
+RUN npm run build
+
+FROM rust:1.83-slim AS backend
+
+WORKDIR /build
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    pkg-config \
+    libssl-dev \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY backend/Cargo.toml backend/Cargo.lock ./
+RUN mkdir src && echo "fn main() {}" > src/main.rs && echo "" > src/lib.rs
+RUN cargo build --release 2>/dev/null || true
+RUN rm -rf src
+
+COPY backend/src/ src/
+RUN touch src/main.rs src/lib.rs
+RUN cargo build --release
+
+FROM debian:bookworm-slim
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
+    libssl3 \
+    curl \
+    && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+
+COPY --from=backend /build/target/release/server-monitor /app/server-monitor
+COPY --from=frontend /build/dist /app/static
+
+EXPOSE 8742
+
+CMD ["/app/server-monitor"]

backend/Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "server-monitor"
-version = "1.0.0"
+version = "1.2.0"
 edition = "2021"
 rust-version = "1.75"
 
@@ -18,7 +18,7 @@ reqwest = { version = "0.12", features = ["json", "cookies", "rustls-tls"], defa
 russh = "0.48"
 russh-keys = "0.48"
 bollard = "0.18"
-tower-http = { version = "0.6", features = ["cors"] }
+tower-http = { version = "0.6", features = ["cors", "fs"] }
 chrono = { version = "0.4", features = ["serde"] }
 thiserror = "2"
 anyhow = "1"

backend/Cargo.toml

@@ -5,6 +5,7 @@ use axum::routing::{get, post};
 use axum::Router;
 use tokio::sync::broadcast;
 use tower_http::cors::{Any, CorsLayer};
+use tower_http::services::{ServeDir, ServeFile};
 
 use std::collections::HashMap;
 
@@ -75,8 +76,11 @@ async fn main() {
         .allow_methods(Any)
         .allow_headers(Any);
 
+    let static_dir = std::env::var("SERVERMONITOR_STATIC_DIR")
+        .unwrap_or_else(|_| "/app/static".to_string());
+    let index_file = format!("{}/index.html", static_dir);
+
     let app = Router::new()
-        .route("/", get(routes::root))
         .route("/api/systems", get(routes::get_all_systems))
         .route("/api/systems/{system_id}", get(routes::get_system))
         .route("/api/health", get(routes::health_check))
@@ -90,6 +94,7 @@ async fn main() {
             post(routes::qbit_action),
         )
         .route("/ws", get(websocket::ws_handler))
+        .fallback_service(ServeDir::new(&static_dir).fallback(ServeFile::new(&index_file)))
         .layer(cors)
         .with_state(state.clone());