feat(appliance): initial release of MERICA standalone appliance v1.0.0

Dockerfile

@@ -0,0 +1,137 @@
+# ==============================================================================
+# MERICA Data Lakehouse — Clean Release Appliance Dockerfile
+# ==============================================================================
+# Multi-stage Dockerfile packaging Vite React Frontend, FastAPI Modular Backend,
+# Nginx Reverse Proxy, and Supervisord into a single, decoupled appliance image.
+#
+# Build Command:
+#   docker build -t registry.sicabe.com/merica:1.0.0 .
+# ==============================================================================
+
+# ------------------------------------------------------------------------------
+# Stage 1: Build Frontend Assets
+# ------------------------------------------------------------------------------
+FROM node:20-alpine AS frontend-builder
+WORKDIR /frontend
+
+# Install dependencies and build static bundle
+COPY frontend/package*.json ./
+RUN npm install --legacy-peer-deps
+
+COPY frontend/ ./
+RUN npm run build
+
+# ------------------------------------------------------------------------------
+# Stage 2: MERICA Clean Appliance Runtime
+# ------------------------------------------------------------------------------
+FROM python:3.11-slim AS appliance
+
+LABEL maintainer="BPKP Data Lakehouse Team <dlh@bpkp.go.id>"
+LABEL description="MERICA Data Lakehouse - Production Appliance Image"
+LABEL version="1.0.0"
+
+# Install system dependencies
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    nginx \
+    supervisor \
+    curl \
+    ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+
+# Install Python dependencies
+COPY backend/requirements.txt ./
+RUN pip install --no-cache-dir -r requirements.txt
+
+# Copy Backend application code
+COPY backend/app ./app
+
+# Copy Built Frontend artifacts to Nginx docroot
+COPY --from=frontend-builder /frontend/dist /usr/share/nginx/html
+
+# Setup Nginx, Supervisord, and Entrypoint
+RUN mkdir -p /etc/nginx/conf.d /etc/supervisor/conf.d /var/log/supervisor /app/configs /app/storage /app/data /app/merica-pipelines/configs /app/merica-pipelines/metadata /app/merica-pipelines/dbt
+
+# Nginx Single-Port Reverse Proxy Configuration
+RUN cat <<'EOF' > /etc/nginx/conf.d/default.conf
+server {
+    listen 80;
+    server_name localhost;
+
+    # Frontend Static Assets
+    location / {
+        root /usr/share/nginx/html;
+        index index.html index.htm;
+        try_files $uri $uri/ /index.html;
+    }
+
+    # Internal Loopback Proxy to FastAPI (127.0.0.1:8000)
+    location /api/ {
+        proxy_pass http://127.0.0.1:8000/api/;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_connect_timeout 60s;
+        proxy_read_timeout 120s;
+
+        # WebSocket support
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+    }
+
+    # OpenAPI Documentation
+    location /docs {
+        proxy_pass http://127.0.0.1:8000/docs;
+    }
+    location /openapi.json {
+        proxy_pass http://127.0.0.1:8000/openapi.json;
+    }
+}
+EOF
+RUN rm -f /etc/nginx/sites-enabled/default
+
+# Supervisord Configuration (Dual Daemon: Nginx + Uvicorn)
+RUN cat <<'EOF' > /etc/supervisor/conf.d/supervisord.conf
+[supervisord]
+nodaemon=true
+logfile=/var/log/supervisor/supervisord.log
+pidfile=/var/run/supervisord.pid
+
+[program:nginx]
+command=/usr/sbin/nginx -g "daemon off;"
+autostart=true
+autorestart=true
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes=0
+stderr_logfile=/dev/stderr
+stderr_logfile_maxbytes=0
+
+[program:uvicorn]
+directory=/app
+command=python -m uvicorn app.main:app --host 127.0.0.1 --port 8000 --workers 2
+autostart=true
+autorestart=true
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes=0
+stderr_logfile=/dev/stderr
+stderr_logfile_maxbytes=0
+EOF
+
+# Entrypoint script
+RUN cat <<'EOF' > /entrypoint.sh
+#!/bin/bash
+set -e
+echo "🚀 Starting MERICA Appliance..."
+exec /usr/bin/supervisord -c /etc/supervisor/conf.d/supervisord.conf
+EOF
+RUN chmod +x /entrypoint.sh
+
+EXPOSE 80
+
+HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
+    CMD curl -f http://127.0.0.1/api/v1/health || exit 1
+
+ENTRYPOINT ["/entrypoint.sh"]