mirror of
https://github.com/R0m1k3/xtremflow.git
synced 2026-10-13 10:16:56 +02:00
MichaelandClaude Opus 5.5
3ea6fa0ae3
Le serveur Dart (bin/) est remplacé par un serveur Rust (server/) : tokio + axum, reqwest/rustls, SQLite embarqué via rusqlite. Même API, mêmes routes et mêmes réponses : le front Flutter ne change pas. La base de production est reprise telle quelle : schéma, migrations et formats de dates (DateTime.toIso8601String de Dart) sont reproduits à l'identique, les sessions et hachages existants restent valides. Comportement conservé : cascade de routage, anti-SSRF, logs masqués, rate limits, transcodage HLS/turbo.ts avec repli GPU, quotas fournisseur, enregistrements (reprise, relances, fusion), season passes, EPG, logos de repli, arrêt gracieux sur SIGTERM. Tests Dart portés (132 tests Rust) ; la CI exécute fmt, test et clippy -D warnings, l'image Docker compile le serveur dans un étage rust:1.98.1. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
109 lines
3.8 KiB
Docker
109 lines
3.8 KiB
Docker
# Stage 1: Build Environment (Optimized for Docker Caching)
|
|
# SDK Flutter officiel, version épinglée — la même que la CI. L'image
|
|
# ghcr.io/cirruslabs/flutter:stable n'est plus mise à jour : elle était
|
|
# restée sur Flutter 3.44.0 / Dart 3.12.0 (mai 2026), loin derrière la
|
|
# version stable réelle.
|
|
FROM debian:stable-slim AS builder
|
|
|
|
ARG FLUTTER_VERSION=3.47.6
|
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
ca-certificates \
|
|
curl \
|
|
git \
|
|
unzip \
|
|
xz-utils \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
RUN curl -fsSL "https://storage.googleapis.com/flutter_infra_release/releases/stable/linux/flutter_linux_${FLUTTER_VERSION}-stable.tar.xz" \
|
|
| tar -xJ -C /opt \
|
|
&& git config --global --add safe.directory /opt/flutter
|
|
|
|
ENV PATH="/opt/flutter/bin:/opt/flutter/bin/cache/dart-sdk/bin:${PATH}"
|
|
|
|
WORKDIR /app
|
|
|
|
# Optimize DART VM Memory
|
|
ENV DART_VM_OPTIONS="--old_gen_heap_size=16384"
|
|
ENV FLUTTER_NO_ANALYTICS=1
|
|
|
|
# 1. System Config & Precache (RARELY CHANGES)
|
|
RUN flutter config --enable-web && flutter precache --web
|
|
|
|
# 2. Dependency Resolution (ONLY UPDATES IF PUBSPEC CHANGES)
|
|
# Le lockfile est versionné : le build résout exactement les versions
|
|
# committées au lieu d'en chercher de nouvelles à chaque build.
|
|
COPY pubspec.yaml pubspec.lock ./
|
|
RUN flutter pub get
|
|
|
|
# 3. Source Code Copy (CHANGES OFTEN)
|
|
# Everything except what's in .dockerignore (built-in protection)
|
|
COPY . .
|
|
|
|
# 4. Code Generation
|
|
RUN dart run build_runner build --delete-conflicting-outputs
|
|
|
|
# 5. Compilation (SLOWEST STEP - INEVITABLE)
|
|
# This step MUST run if you modified any Dart file.
|
|
RUN flutter build web --release --base-href="/" --no-tree-shake-icons --no-pub
|
|
|
|
# ============================================
|
|
# Stage 2: Serveur Rust
|
|
# ============================================
|
|
# Bookworm (glibc 2.36) : le binaire tourne tel quel sur le runtime
|
|
# debian:stable-slim, plus récent. Version épinglée comme le SDK Flutter.
|
|
FROM rust:1.98.1-slim-bookworm AS server-builder
|
|
|
|
WORKDIR /server
|
|
|
|
# Dépendances compilées dans une couche à part : elles ne sont recompilées
|
|
# que si Cargo.toml/Cargo.lock changent, pas à chaque modification du code.
|
|
COPY server/Cargo.toml server/Cargo.lock ./
|
|
RUN mkdir src && echo 'fn main() {}' > src/main.rs \
|
|
&& cargo build --release --locked \
|
|
&& rm -rf src target/release/xtremflow-server* target/release/deps/xtremflow_server*
|
|
|
|
COPY server/src ./src
|
|
RUN cargo build --release --locked
|
|
|
|
# ============================================
|
|
# Stage 3: Production Runtime
|
|
# ============================================
|
|
FROM debian:stable-slim
|
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
ca-certificates \
|
|
sqlite3 \
|
|
curl \
|
|
wget \
|
|
xz-utils \
|
|
gosu \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# FFmpeg with NVENC (cached unless this RUN changes)
|
|
RUN wget -q https://github.com/BtbN/FFmpeg-Builds/releases/download/latest/ffmpeg-master-latest-linux64-gpl.tar.xz \
|
|
&& tar xf ffmpeg-master-latest-linux64-gpl.tar.xz \
|
|
&& mv ffmpeg-master-latest-linux64-gpl/bin/ffmpeg /usr/local/bin/ \
|
|
&& mv ffmpeg-master-latest-linux64-gpl/bin/ffprobe /usr/local/bin/ \
|
|
&& rm -rf ffmpeg-master-latest-linux64-gpl* \
|
|
&& chmod +x /usr/local/bin/ffmpeg /usr/local/bin/ffprobe
|
|
|
|
RUN groupadd -r xtremuser && useradd -r -g xtremuser -G audio,video xtremuser
|
|
WORKDIR /app
|
|
|
|
RUN mkdir -p /app/data /app/web /app/recordings /tmp/xtremflow_streams \
|
|
&& chown -R xtremuser:xtremuser /app /tmp/xtremflow_streams
|
|
|
|
COPY --from=builder /app/build/web /app/web
|
|
COPY --from=server-builder /server/target/release/xtremflow-server /app/server
|
|
COPY entrypoint.sh /app/entrypoint.sh
|
|
RUN chmod +x /app/server /app/entrypoint.sh
|
|
|
|
EXPOSE 8089
|
|
|
|
HEALTHCHECK --interval=30s --timeout=3s \
|
|
CMD curl -f http://localhost:8089/index.html || exit 1
|
|
|
|
ENTRYPOINT ["/app/entrypoint.sh"]
|
|
CMD ["/app/server", "--port", "8089", "--path", "/app/web"]
|