feat: web-parser as service (#5)

* feat: web-parser as service

* chore: k8s

* fix: path

Author: hmbanan666

.github/workflows/docker-nightly.yml

@@ -26,7 +26,7 @@ jobs:
       - name: Set matrix
         id: set-matrix
         run: |
-          APPS=("web-app" "web-storefront")
+          APPS=("web-app" "web-storefront" "web-parser")
           CHANGED=()
 
           if [ "${{ github.event_name }}" == "workflow_dispatch" ]; then

.github/workflows/docker-release.yml

@@ -33,7 +33,7 @@ jobs:
       - name: Set package in env
         id: set-package
         run: |
-          APPS=("web-app" "web-storefront")
+          APPS=("web-app" "web-storefront" "web-parser")
           MATCH="${{ steps.regex-match.outputs.match }}"
 
           if [ -z "$MATCH" ]; then

apps/web-parser/server/routes/health.get.ts

@@ -0,0 +1,11 @@
+import { repository } from '@roll-stack/database'
+
+export default defineEventHandler(async () => {
+  try {
+    await repository.checkHealth()
+
+    return { ok: true }
+  } catch (error) {
+    throw errorResolver(error)
+  }
+})

apps/web-parser/server/routes/index.ts

@@ -0,0 +1,48 @@
+FROM node:22.17.1-alpine AS base
+ENV NODE_OPTIONS="--max_old_space_size=4096"
+
+# Builder stage
+FROM base AS builder
+WORKDIR /app
+COPY package.json pnpm-lock.yaml pnpm-workspace.yaml .npmrc ./
+COPY packages ./packages
+COPY apps/web-parser ./apps/web-parser
+RUN npm install --ignore-scripts -g pnpm && \
+  pnpm i --frozen-lockfile && \
+  pnpm build --filter @roll-stack/web-parser
+
+# Production stage
+FROM base AS production
+RUN apk add --no-cache curl
+WORKDIR /app
+
+# Copy built artifacts from builder
+COPY --from=builder /app/apps/web-parser/.output .
+COPY docker/web-parser/health-check.sh ./
+
+# Running as non-root is a security best practice
+# Make the Health check script executable
+RUN addgroup -S appgroup && \
+  adduser -S appuser -G appgroup && \
+  chmod +x ./health-check.sh
+USER appuser
+
+# Configuration
+ARG VERSION=nightly
+LABEL maintainer="hmbanan666@hotmail.com" \
+  description="WebParser" \
+  version=${VERSION}
+ENV VERSION=${VERSION} \
+  NODE_ENV=production \
+  PORT=3000 \
+  HOST=0.0.0.0
+
+EXPOSE 3000
+
+# Health check using exec form
+HEALTHCHECK --interval=30s --timeout=5s --start-period=60s \
+  CMD ["/app/health-check.sh"]
+
+# Run the application
+ENTRYPOINT ["node"]
+CMD ["/app/server/index.mjs"]

docker/web-parser/Dockerfile

@@ -0,0 +1,2 @@
+#!/bin/sh
+curl -f http://localhost:3000/api/health || exit 1

docker/web-parser/health-check.sh

@@ -0,0 +1,55 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: web-parser
+  namespace: sushi
+spec:
+  selector:
+    matchLabels:
+      app: web-parser
+  replicas: 1
+  revisionHistoryLimit: 1
+  minReadySeconds: 20
+  template:
+    metadata:
+      labels:
+        app: web-parser
+    spec:
+      automountServiceAccountToken: false
+      securityContext:
+        runAsUser: 1001
+        fsGroup: 1001
+      imagePullSecrets:
+        - name: registry-secret
+      containers:
+        - name: web-parser
+          image: sushi-love.registry.twcstorage.ru/roll-stack/web-parser:nightly
+          imagePullPolicy: Always
+          ports:
+            - containerPort: 3000
+          envFrom:
+            - secretRef:
+                name: web-parser
+          resources:
+            limits:
+              cpu: 1000m
+              memory: 512Mi
+              ephemeral-storage: 2Gi
+            requests:
+              cpu: 50m
+              memory: 128Mi
+              ephemeral-storage: 1Gi
+          livenessProbe:
+            httpGet:
+              port: 3000
+              path: /api/health
+            initialDelaySeconds: 60
+            periodSeconds: 60
+            timeoutSeconds: 10
+          securityContext:
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: false
+            runAsNonRoot: true
+            capabilities:
+              drop:
+                - ALL

k8s/web-parser/deployment.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: web-parser
+  namespace: sushi
+type: Opaque
+stringData:
+  DATABASE_URL: ''