Prepare Dockerfile for K8S

Dockerfile

@@ -2,15 +2,31 @@ FROM node:16
 
 ENV NODE_ENV=development
 
-WORKDIR /usr/src/app
+RUN useradd -ms /bin/bash inaturalist
+USER inaturalist
 
-COPY package*.json ./
+# Set the working directory in the container
+WORKDIR /home/inaturalist/api
 
-COPY config_example.js config.js
+# Copy the dependencies file to the working directory
+COPY --chown=inaturalist:inaturalist package*.json .
+COPY --chown=inaturalist:inaturalist config.docker.js config.js
 
+# Install dependencies
 RUN npm install
 
-COPY . .
+# Copy app and libs
+COPY --chown=inaturalist:inaturalist lib lib
+COPY --chown=inaturalist:inaturalist openapi openapi
+COPY --chown=inaturalist:inaturalist public public
+COPY --chown=inaturalist:inaturalist schema schema
+COPY --chown=inaturalist:inaturalist swagger-ui swagger-ui
+COPY --chown=inaturalist:inaturalist app.js .
+
+# Create directories for the log and static content
+RUN mkdir /home/inaturalist/api/log
+RUN mkdir /home/inaturalist/api/cache
+RUN mkdir -p /home/inaturalist/api/public/uploads
 
 EXPOSE 4000
 

config.docker.js

@@ -0,0 +1,70 @@
+var fs = require( "fs" );
+
+const {
+    INAT_DB_HOST,
+    INAT_DB_USER,
+    INAT_DB_PASS,
+    INAT_ES_HOST,
+    INAT_REDIS_HOST,
+    INAT_API_URL,
+    INAT_RAILS_URL,
+    INAT_VISION_URL,
+    INAT_DB_SSL_KEY_PATH,
+    INAT_DB_SSL_CRT_PATH,
+    INAT_STATIC_IMAGE_URL,
+    INAT_JWT_SECRET,
+    INAT_JWT_APPLICATION_SECRET,
+    INAT_AWS_OPENDATA_BUCKET,
+    INAT_AWS_OPENDATA_DOMAIN,
+    INAT_AWS_OPENDATA_REGION,
+    INAT_AWS_OPENDATA_ACL,
+    INAT_TAXA_FILE_PATH
+  } = process.env;
+
+module.exports = {
+  environment: NODE_ENV || "development",
+  currentVersionURL: INAT_API_URL || "http://localhost:4000/v1",
+  apiURL: INAT_RAILS_URL || "http://localhost:3000",
+  jwtSecret: INAT_JWT_SECRET || "secret",
+  jwtApplicationSecret: INAT_JWT_APPLICATION_SECRET || "application_secret",
+  tileSize: 512,
+  debug: false,
+  database: {
+    user: INAT_DB_USER || "inaturalist",
+    host: INAT_DB_HOST || "127.0.0.1",
+    port: 5432,
+    geometry_field: "geom",
+    srid: 4326,
+    password: INAT_DB_PASS || "inaturalist",
+    ssl: ( INAT_DB_SSL_KEY_PATH && INAT_DB_SSL_CRT_PATH ) ? {
+      rejectUnauthorized: false,
+      key: fs.readFileSync( INAT_DB_SSL_KEY_PATH ),
+      cert: fs.readFileSync( INAT_DB_SSL_CRT_PATH )
+    } : false
+  },
+  staticImagePrefix: INAT_STATIC_IMAGE_URL || "http://localhost:3000/attachments/",
+  websiteURL: INAT_RAILS_URL ? `${INAT_RAILS_URL}/` : "http://localhost:3000/",
+  imageProcesing: {
+    tensorappURL: INAT_VISION_URL || "http://localhost:6006",
+    uploadsDir: "/home/inaturalist/api/public/uploads",
+    taxaFilePath: INAT_TAXA_FILE_PATH || "",
+    geomodel: true,
+    combinedThreshold: 0.001,
+    frequencyBackend: "redis"
+  },
+  redis: {
+    host: INAT_REDIS_HOST || "127.0.0.1",
+    port: 6379
+  },
+  aws: {
+    openDataBucket: INAT_AWS_OPENDATA_BUCKET || "staticdev-public",
+    openDataDomain: INAT_AWS_OPENDATA_DOMAIN || "staticdev-public.s3.amazonaws.com",
+    openDataRegion: INAT_AWS_OPENDATA_REGION || "us-east-1",
+    openDataACL: INAT_AWS_OPENDATA_ACL ||"",
+  },
+  elasticsearch: {
+    host: INAT_ES_HOST ? `http://${INAT_ES_HOST}:9200` : "http://localhost:9200"
+  },
+  cacheDir: "/home/inaturalist/api/cache",
+  seekExceptionListID: 945029
+}