From 4dbca41a24883c2d546d20225a247226e5213b3b Mon Sep 17 00:00:00 2001
From: Thilo Schwarz <osp@thischwa.codes>
Date: Mon, 29 Jun 2026 18:04:09 +0200
Subject: [PATCH] Add Docker support with CI workflow and runtime configuration

- Added `Dockerfile` to build a Docker image for the JavadocViewerService.
- Implemented a Gitea-based CI workflow (`deploy-image.yml`) to build and push the Docker image.
- Updated `settings.local.json` to expand permissions for the service.
- Included `-DskipTests` to Maven arguments in `JavadocService.java`.
---
 .claude/settings.local.json                   |  4 +-
 .gitea/workflows/deploy-image.yml             | 49 +++++++++++++++++++
 Dockerfile                                    | 36 ++++++++++++++
 .../thischwa/jvs/service/JavadocService.java  |  3 +-
 4 files changed, 90 insertions(+), 2 deletions(-)
 create mode 100644 .gitea/workflows/deploy-image.yml
 create mode 100644 Dockerfile

diff --git a/.claude/settings.local.json b/.claude/settings.local.json
index c1b1c9d..6e93c43 100644
--- a/.claude/settings.local.json
+++ b/.claude/settings.local.json
@@ -1,7 +1,9 @@
 {
   "permissions": {
     "allow": [
-      "Bash(java -version)"
+      "Bash(java -version)",
+      "WebFetch(domain:github.com)",
+      "Bash(find /Users/thilo/development/java/JavadocViewerService -not -path */target/* -not -path */.mvn/* -not -path */.maven/* -not -path */.git/* -type f -o -type d)"
     ]
   }
 }
diff --git a/.gitea/workflows/deploy-image.yml b/.gitea/workflows/deploy-image.yml
new file mode 100644
index 0000000..8999fa8
--- /dev/null
+++ b/.gitea/workflows/deploy-image.yml
@@ -0,0 +1,49 @@
+name: Build and Push Docker Image
+
+on:
+  push:
+  workflow_dispatch:
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Log in to Gitea Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ gitea.server_url && fromJSON('{}') || '' }}${{ vars.GITEA_HOST || 'git.mein-gateway.de' }}
+          username: ${{ gitea.actor }}
+          password: ${{ secrets.GITEA_TOKEN }}
+
+      - name: Compute image name and tag
+        id: meta
+        run: |
+          OWNER=$(echo "${{ gitea.repository_owner }}" | tr '[:upper:]' '[:lower:]')
+          IMAGE_NAME=$(echo "javadocviewerservice" | tr '[:upper:]' '[:lower:]')
+          REGISTRY="${{ vars.GITEA_HOST || 'git.mein-gateway.de' }}"
+          FULL_IMAGE="${REGISTRY}/${OWNER}/${IMAGE_NAME}"
+
+          REF="${{ gitea.ref_name }}"
+          if [ "${REF}" = "main" ]; then
+            TAG="latest"
+          else
+            TAG=$(echo "${REF}" | tr '[:upper:]' '[:lower:]' | sed 's/[^a-z0-9._-]/-/g')
+          fi
+
+          echo "image=${FULL_IMAGE}" >> "$GITHUB_OUTPUT"
+          echo "tag=${TAG}" >> "$GITHUB_OUTPUT"
+          echo "Image: ${FULL_IMAGE}:${TAG}"
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.image }}:${{ steps.meta.outputs.tag }}
diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..9d89139
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,36 @@
+# Stage 1: Build the JAR using Maven
+FROM maven:3.9-eclipse-temurin-17 AS builder
+
+LABEL org.opencontainers.image.description="JavadocViewerService serves and manages Javadoc documentation from Git repositories."
+
+WORKDIR /build
+
+# Copy pom.xml and download dependencies first (for Docker cache)
+COPY pom.xml .
+RUN mvn dependency:go-offline
+
+# Copy the full source tree and build the application
+COPY src ./src
+RUN mvn clean package -DskipTests
+
+# Stage 2: Minimal runtime image
+FROM eclipse-temurin:17-jdk-jammy
+
+WORKDIR /app
+
+# Optional: add tini to manage signals properly
+RUN apt-get update && apt-get install -y tini && rm -rf /var/lib/apt/lists/*
+
+# Create a non-root user
+RUN useradd -m jvsuser
+USER jvsuser
+
+# Copy the built jar from the builder stage
+COPY --from=builder /build/target/*.jar /app/jvs.jar
+
+VOLUME ["/app/javadoc-storage", "/app/database"]
+
+EXPOSE 8080
+
+ENTRYPOINT ["/usr/bin/tini", "--"]
+CMD ["java", "-jar", "jvs.jar"]
diff --git a/src/main/java/codes/thischwa/jvs/service/JavadocService.java b/src/main/java/codes/thischwa/jvs/service/JavadocService.java
index b4b4172..c372f98 100644
--- a/src/main/java/codes/thischwa/jvs/service/JavadocService.java
+++ b/src/main/java/codes/thischwa/jvs/service/JavadocService.java
@@ -87,7 +87,8 @@ public class JavadocService {
         "--no-transfer-progress",
         "-Dlombok.delombok.skip=true",
         "-Dcheckstyle.skip=true",
-        "-Djacoco.skip=true"
+        "-Djacoco.skip=true",
+        "-DskipTests"
     );
     pb.directory(repoDir);
     pb.redirectErrorStream(true);