feat: production-ready post service with full test coverage and ESLint fixes

Author: hmake98

.dockerignore

@@ -1 +1,69 @@
+# Dependencies
 node_modules
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+
+# Coverage and testing
+coverage
+.nyc_output
+test
+**/*.spec.ts
+**/*.test.ts
+
+# Build artifacts
+dist
+*.tgz
+
+# Environment files
+.env
+.env.local
+.env.development
+.env.test
+.env.production
+
+# IDE and editor files
+.vscode
+.idea
+*.swp
+*.swo
+*~
+
+# OS generated files
+.DS_Store
+.DS_Store?
+._*
+.Spotlight-V100
+.Trashes
+ehthumbs.db
+Thumbs.db
+
+# Git
+.git
+.gitignore
+README.md
+CHANGELOG.md
+
+# Docker
+Dockerfile*
+docker-compose*
+.dockerignore
+
+# Logs
+logs
+*.log
+
+# Temporary files
+.tmp
+.cache
+
+# Development tools
+eslint.config.mjs
+.eslintrc*
+.prettierrc*
+.husky
+lint-staged
+
+# Documentation
+docs
+*.md

.env.docker

@@ -1,29 +1,29 @@
-# App
-APP_NAME=@backendworks/post
-APP_ENV=development
-APP_CORS_ORIGINS=*
+NODE_ENV="local"
+
+APP_NAME="@backendworks/post"
+APP_CORS_ORIGINS="*"
 APP_DEBUG=true
-APP_LOG_LEVEL=debug
 
-# HTTP
 HTTP_ENABLE=true
-HTTP_HOST=0.0.0.0
+HTTP_HOST="0.0.0.0"
 HTTP_PORT=9002
 HTTP_VERSIONING_ENABLE=true
 HTTP_VERSION=1
 
-# Kafka
-KAFKA_BROKERS=kafka:9092
-KAFKA_CLIENT_ID=post_service
-KAFKA_CONSUMER_GROUP=post_service_group
-KAFKA_ADMIN_CLIENT_ID=bw_admin
-KAFKAJS_NO_PARTITIONER_WARNING=1
+SENTRY_DSN=""
+
+DATABASE_URL="postgresql://admin:master123@postgres:5432/postgres?schema=public"
 
-# Monitoring
-SENTRY_DSN=
+ACCESS_TOKEN_SECRET_KEY="EAJYjNJUnRGJ6uq1YfGw4NG1pd1z102J"
+ACCESS_TOKEN_EXPIRED="1d"
+REFRESH_TOKEN_SECRET_KEY="LcnlpiuHIJ6eS51u1mcOdk0P49r2Crwu"
+REFRESH_TOKEN_EXPIRED="7d"
 
-# Database
-DATABASE_URL=postgresql://postgres:master123@postgres:5432/postgres?schema=post
+REDIS_URL="redis://redis:6379"
+REDIS_KEY_PREFIX="post:"
+REDIS_TTL=3600
 
-# Redis
-REDIS_URL=redis://redis:6379
+GRPC_URL="0.0.0.0:50052"
+GRPC_PACKAGE="post"
+GRPC_AUTH_URL="0.0.0.0:50051"
+GRPC_AUTH_PACKAGE="auth"

.eslintignore

@@ -0,0 +1,32 @@
+name: CI (post)
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        node-version: [18.x, 20.x]
+    steps:
+      - uses: actions/checkout@v4
+      - name: Use Node.js ${{ matrix.node-version }}
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node-version }}
+      - name: Install dependencies
+        run: npm install --legacy-peer-deps
+        working-directory: .
+      - name: Run lint
+        run: |
+          if [ -f eslint.config.mjs ]; then
+            npx eslint .
+          fi
+        working-directory: .
+      - name: Run tests
+        run: npm test
+        working-directory: . 

.eslintrc.js

@@ -33,6 +33,5 @@ lerna-debug.log*
 !.vscode/tasks.json
 !.vscode/launch.json
 !.vscode/extensions.json
-
 .env
-!.env.docker
+

.github/workflows/ci.yml

@@ -1,6 +1,12 @@
 {
   "singleQuote": true,
   "trailingComma": "all",
+  "semi": true,
+  "printWidth": 100,
+  "tabWidth": 4,
   "useTabs": false,
-  "tabWidth": 4
+  "bracketSpacing": true,
+  "bracketSameLine": false,
+  "arrowParens": "avoid",
+  "endOfLine": "lf"
 }

.gitignore

@@ -1,14 +1,54 @@
-FROM node:lts-alpine 
+# Multi-stage build for optimal image size
+FROM node:lts-alpine AS base
 
+# Install dependencies only when needed
+FROM base AS deps
+RUN apk add --no-cache libc6-compat wget openssl
 WORKDIR /app
 
-COPY package.json yarn.lock ./
-COPY prisma ./prisma
+# Copy package files
+COPY package.json yarn.lock* ./
+COPY prisma ./prisma/
 
-RUN yarn install --frozen-lockfile
+# Install dependencies
+RUN yarn --frozen-lockfile --production=false
 
+# Build the source code
+FROM base AS builder
+RUN apk add --no-cache wget openssl
+WORKDIR /app
+COPY --from=deps /app/node_modules ./node_modules
 COPY . .
 
-EXPOSE 9002
+# Generate Prisma client and build application
+RUN yarn prisma:generate
+RUN yarn proto:generate
+RUN yarn build
+
+# Production image, copy all the files and run the app
+FROM base AS runner
+RUN apk add --no-cache wget openssl
+WORKDIR /app
+
+# Create non-root user for security
+RUN addgroup --system --gid 1001 nodejs
+RUN adduser --system --uid 1001 nestjs
+
+# Copy necessary files from builder stage
+COPY --from=builder /app/dist ./dist
+COPY --from=builder /app/prisma ./prisma
+COPY --from=builder /app/src/protos ./src/protos
+COPY --from=builder /app/package.json ./package.json
+COPY --from=builder /app/yarn.lock ./yarn.lock
+
+# Copy node_modules from deps stage (production only)
+COPY --from=deps /app/node_modules ./node_modules
+
+# Change ownership to nestjs user
+RUN chown -R nestjs:nodejs /app
+USER nestjs
+
+# Expose ports for HTTP and gRPC
+EXPOSE 9002 50052
 
-CMD [ "yarn", "dev" ]
+CMD ["yarn", "start"]