lerko
edfe6122b1
1. Kuma import now maps push monitor tokens (generates crypto/rand token) and paused state (Active=false → Paused=true). Previously push monitors imported with empty token sat DOWN forever, and paused Kuma monitors came in unpaused and started alerting. 2. Dockerfile adds HEALTHCHECK against /api/health on port 8080. Container orchestrators can now detect unhealthy instances. 3. migrate-secrets sets the encryptor before loading alerts, so already-encrypted settings are decrypted correctly on second run instead of failing with a JSON unmarshal error. 4. docker-compose.yml adds container hardening: read_only filesystem, cap_drop ALL, no-new-privileges, tmpfs for /tmp.
38 lines
1.3 KiB
Docker
38 lines
1.3 KiB
Docker
# --- Stage 1: Builder ---
|
|
FROM golang:1.26-alpine3.23@sha256:91eda9776261207ea25fd06b5b7fed8d397dd2c0a283e77f2ab6e91bfa71079d AS builder
|
|
WORKDIR /app
|
|
COPY go.mod go.sum ./
|
|
RUN --mount=type=cache,target=/go/pkg/mod \
|
|
go mod download
|
|
COPY . .
|
|
ENV CGO_ENABLED=0
|
|
ARG VERSION=dev
|
|
ARG COMMIT=none
|
|
ARG BUILD_DATE=unknown
|
|
RUN --mount=type=cache,target=/go/pkg/mod \
|
|
--mount=type=cache,target=/root/.cache/go-build \
|
|
go build -trimpath -ldflags="-s -w -X main.version=${VERSION} -X main.commit=${COMMIT} -X main.date=${BUILD_DATE}" -o uptop ./cmd/uptop
|
|
|
|
# --- Stage 2: Runner ---
|
|
FROM alpine:3.23@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11
|
|
WORKDIR /app
|
|
RUN apk add --no-cache ca-certificates && apk upgrade --no-cache
|
|
RUN addgroup -g 1000 -S uptop && adduser -u 1000 -S uptop -G uptop
|
|
RUN mkdir -p /data/.ssh && chown -R uptop:uptop /data
|
|
|
|
COPY --from=builder /app/uptop .
|
|
COPY --chmod=755 docker-entrypoint.sh /usr/local/bin/
|
|
|
|
ENV LIPGLOSS_RENDERER_HAS_DARK_BACKGROUND=true
|
|
ENV UPTOP_DB_TYPE=sqlite
|
|
ENV UPTOP_DB_DSN=/data/uptop.db
|
|
ENV UPTOP_KEYS=/data/authorized_keys
|
|
ENV UPTOP_SSH_HOST_KEY=/data/.ssh/id_ed25519
|
|
ENV UPTOP_PORT=23234
|
|
|
|
EXPOSE 23234
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
|
|
CMD wget -qO- http://localhost:8080/api/health || exit 1
|
|
USER uptop
|
|
ENTRYPOINT ["docker-entrypoint.sh"]
|
|
CMD ["./uptop"] |