Release 3.0.0 (build process)

.dockerignore

@@ -0,0 +1,68 @@
+/.git
+!/.git/config
+
+# Unneeded application files
+/.docker
+/.github
+/docs
+/fixtures
+/public/build
+/public/fixtures
+/public/media/*
+!public/media/thumbnail_other.png
+!public/media/thumbnail_video.png
+/scripts
+/tests
+
+###> symfony/framework-bundle ###
+/.env.local
+/.env.local.php
+/.env.*.local
+/config/secrets/prod/prod.decrypt.private.php
+/var/
+/vendor/
+###< symfony/framework-bundle ###
+
+###> friendsofphp/php-cs-fixer ###
+/.php-cs-fixer.php
+/.php-cs-fixer.cache
+###< friendsofphp/php-cs-fixer ###
+
+###> phpunit/phpunit ###
+/phpunit.xml
+.phpunit.result.cache
+###< phpunit/phpunit ###
+
+###> lexik/jwt-authentication-bundle ###
+/config/jwt/*.pem
+###< lexik/jwt-authentication-bundle ###
+
+xdebug.ini
+launch.json
+
+###> pentatrion/vite-bundle ###
+/node_modules/
+###< pentatrion/vite-bundle ###
+
+#> Playwright
+/test-results/
+/playwright-report/
+/blob-report/
+/playwright/.cache/
+#< Playwright
+
+###> vincentlanglet/twig-cs-fixer ###
+/.twig-cs-fixer.cache
+###< vincentlanglet/twig-cs-fixer ###
+
+docker-compose.*
+phpstan.dist.neon
+psalm*
+playwright.*
+phpunit.*
+rector.php
+Taskfile.yml
+.markdown*
+.php-cs-fixer.dist.php
+.twig-cs-fixer.dist.php
+.prettier

.env

@@ -19,7 +19,7 @@ ITKDEV_TEMPLATE=symfony-6
 
 ###> symfony/framework-bundle ###
 APP_ENV=dev
-APP_SECRET=22d8a60c047b96413b3337e3ddae3da9
+APP_SECRET=CHANGE_ME
 TRUSTED_PROXIES=127.0.0.1,REMOTE_ADDR
 ###< symfony/framework-bundle ###
 
@@ -42,7 +42,7 @@ CORS_ALLOW_ORIGIN='^https?://(localhost|127\.0\.0\.1)(:[0-9]+)?$'
 ###> lexik/jwt-authentication-bundle ###
 JWT_SECRET_KEY=%kernel.project_dir%/config/jwt/private.pem
 JWT_PUBLIC_KEY=%kernel.project_dir%/config/jwt/public.pem
-JWT_PASSPHRASE=APP_JWT_PASSPHRASE
+JWT_PASSPHRASE=CHANGE_ME
 # Default: 1 hour
 JWT_TOKEN_TTL=3600
 # Default: 15 days

.github/workflows/apispec.yaml

@@ -1,6 +1,7 @@
 on: pull_request
 
 name: Api Spec
+run-name: "Api Spec - ${{ github.head_ref || github.ref_name }}"
 
 jobs:
   apispec:
@@ -9,7 +10,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        php: ["8.3"]
+        php: ["8.4"]
     steps:
       - name: Checkout
         uses: actions/checkout@v4

.github/workflows/changelog.yaml

@@ -7,6 +7,7 @@
 ### Checks that changelog has been updated
 
 name: Changelog
+run-name: "Changelog - ${{ github.head_ref || github.ref_name }}"
 
 on:
   pull_request:

.github/workflows/composer.yaml

@@ -24,6 +24,7 @@
 ###    ```
 
 name: Composer
+run-name: "Composer - ${{ github.head_ref || github.ref_name }}"
 
 env:
   COMPOSE_USER: runner

.github/workflows/composer_install.yaml

@@ -1,6 +1,7 @@
 on: pull_request
 
 name: Composer install
+run-name: "Composer install - ${{ github.head_ref || github.ref_name }}"
 
 jobs:
   test-composer-install:
@@ -10,7 +11,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        php: ["8.3"]
+        php: ["8.4"]
     name: Composer install in prod mode (PHP ${{ matrix.php}})
     steps:
       - name: Checkout

.github/workflows/docker_build_stg_images.yml

@@ -0,0 +1,77 @@
+---
+on:
+  push:
+    branches:
+      - "release/*"
+
+# This Action builds to os2display/* using ./infrastructure/*
+name: Build docker image (develop)
+run-name: "Build docker image (staging) - ${{ github.head_ref || github.ref_name }}"
+
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+    env:
+      APP_VERSION: develop
+      COMPOSER_ALLOW_SUPERUSER: 1
+    steps:
+      - name: Login to DockerHub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USER }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      # Build api
+      - name: Docker meta (API)
+        id: meta-api
+        uses: docker/metadata-action@v5
+        with:
+          images: os2display/display-api-service
+
+      - name: Set release timestamp
+        run: |
+          echo "APP_RELEASE_TIMESTAMP=$(echo $(date +%s))" >> $GITHUB_ENV
+          echo "APP_RELEASE_TIME=$(echo $(date))" >> $GITHUB_ENV
+
+      - name: Build and push (API)
+        uses: docker/build-push-action@v6
+        with:
+          context: ./infrastructure/display-api-service/
+          file: ./infrastructure/display-api-service/Dockerfile
+          build-args: |
+            APP_VERSION=${{ env.APP_VERSION }}
+            APP_RELEASE_TIMESTAMP=${{ env.APP_RELEASE_TIMESTAMP }}
+            APP_RELEASE_TIME=${{ env.APP_RELEASE_TIME }}
+          push: true
+          tags: ${{ steps.meta-api.outputs.tags }}
+          labels: ${{ steps.meta-api.outputs.labels }}
+          provenance: mode=max
+          sbom: true
+          platforms: linux/amd64,linux/arm64
+
+      # Build nginx (depends on api build)
+      - name: Docker meta (Nginx)
+        id: meta-nginx
+        uses: docker/metadata-action@v5
+        with:
+          images: os2display/display-api-service-nginx
+
+      - name: Build and push (Nginx)
+        uses: docker/build-push-action@v6
+        with:
+          context: ./infrastructure/nginx/
+          file: ./infrastructure/nginx/Dockerfile
+          build-args: |
+            APP_VERSION=${{ env.APP_VERSION }}
+          push: true
+          tags: ${{ steps.meta-nginx.outputs.tags }}
+          labels: ${{ steps.meta-nginx.outputs.labels }}
+          provenance: mode=max
+          sbom: true
+          platforms: linux/amd64,linux/arm64

.github/workflows/doctrine.yaml

@@ -1,6 +1,7 @@
 on: pull_request
 
 name: Doctrine
+run-name: "Doctrine - ${{ github.head_ref || github.ref_name }}"
 
 jobs:
   validate-doctrine-shema:
@@ -10,7 +11,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        php: ["8.3"]
+        php: ["8.4"]
     name: Validate Schema (PHP ${{ matrix.php}})
     services:
       mariadb: