split into block and add pr preview

docs: minor typo

.github/workflows/build.yml

@@ -0,0 +1,61 @@
+name: Docker Build Reusable
+
+on:
+  workflow_call:
+    inputs:
+      push:
+        required: false
+        type: boolean
+        default: false
+      nginx_version:
+        required: true
+        type: string
+      tags:
+        required: true
+        type: string
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+        with:
+          install: true
+
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v4
+        if: inputs.push
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Log in to the Container registry
+        uses: docker/login-action@v4
+        if: inputs.push
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Docker Labels
+        id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: |
+            cupcakearmy/static
+            ghcr.io/${{ github.repository }}
+          tags: ${{ inputs.tags }}
+
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          push: ${{ inputs.push }}
+          platforms: linux/amd64,linux/arm64
+          build-args: NGINX=${{ inputs.nginx_version }}
+          tags: ${{ steps.meta.outputs.tags }}

.github/workflows/cron.yml

@@ -0,0 +1,21 @@
+name: Matrix Cron Build
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 3 * * 1'
+
+jobs:
+  tags:
+    uses: ./.github/workflows/tags.yml
+
+  build:
+    needs: tags
+    strategy:
+      matrix: ${{fromJson(needs.tags.outputs.matrix)}}
+    uses: ./.github/workflows/build.yml
+    with:
+      push: true
+      nginx_version: ${{ matrix.version }}
+      tags: ${{ matrix.tags }}
+    secrets: inherit

.github/workflows/docker.yml

@@ -1,39 +0,0 @@
-name: docker
-
-on:
-  workflow_dispatch:
-  push:
-    tags:
-      - "v*.*.*"
-
-jobs:
-  docker:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v1
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v1
-      - name: Docker Labels
-        id: meta
-        uses: crazy-max/ghaction-docker-meta@v2
-        with:
-          images: cupcakearmy/static
-          tags: |
-            type=semver,pattern={{version}}
-            type=semver,pattern={{major}}.{{minor}}
-            type=semver,pattern={{major}}
-      - name: Login to DockerHub
-        uses: docker/login-action@v1
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-      - name: Build and push
-        id: docker_build
-        uses: docker/build-push-action@v2
-        with:
-          platforms: linux/amd64,linux/arm64
-          push: true
-          tags: ${{ steps.meta.outputs.tags }}
-      - name: Image digest
-        run: echo ${{ steps.docker_build.outputs.digest }}

.github/workflows/pr.yml

@@ -0,0 +1,18 @@
+name: PR Build
+
+on:
+  pull_request:
+
+jobs:
+  tags:
+    uses: ./.github/workflows/tags.yml
+
+  build:
+    needs: tags
+    strategy:
+      matrix: ${{fromJson(needs.tags.outputs.matrix)}}
+    uses: ./.github/workflows/build.yml
+    with:
+      push: false
+      nginx_version: ${{ matrix.version }}
+      tags: ${{ matrix.tags }}

.github/workflows/tags.yml

@@ -0,0 +1,23 @@
+name: Fetch Nginx Tags
+
+on:
+  workflow_call:
+    outputs:
+      matrix:
+        description: JSON matrix of nginx versions and docker tags
+        value: ${{ jobs.fetch.outputs.matrix }}
+
+jobs:
+  fetch:
+    runs-on: ubuntu-latest
+    outputs:
+      matrix: ${{ steps.fetcher.outputs.matrix }}
+    defaults:
+      run:
+        working-directory: tags
+    steps:
+      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@v2
+      - run: bun i
+      - id: fetcher
+        run: bun .

Dockerfile

@@ -1,25 +1,24 @@
 # BUILDER
-FROM alpine AS builder
-
-ARG DEP_DEV="alpine-sdk zlib-dev pcre-dev openssl-dev gd-dev"
-ARG NGINX_MODULES="--with-http_realip_module --with-threads --with-http_ssl_module --with-http_v2_module --with-http_image_filter_module --with-http_gzip_static_module --with-http_secure_link_module"
-ARG NGINX=1.21.6
+FROM alpine:3 AS builder
 
+ARG DEP_DEV="alpine-sdk zlib-dev pcre-dev openssl-dev gd-dev curl"
 RUN apk add --no-cache ${DEP_DEV}
 
 WORKDIR /build
+ARG NGINX
 RUN curl https://nginx.org/download/nginx-${NGINX}.tar.gz | tar xz
 RUN mv nginx-${NGINX} nginx
 RUN git clone --recursive https://github.com/google/ngx_brotli.git
 
 WORKDIR /build/nginx
+ARG NGINX_MODULES="--with-http_realip_module --with-threads --with-http_ssl_module --with-http_v2_module --with-http_image_filter_module --with-http_gzip_static_module --with-http_secure_link_module"
 RUN ./configure ${NGINX_MODULES} --add-module=../ngx_brotli
 RUN make
 RUN make install
 
 
 # RUNNER
-FROM alpine
+FROM alpine:3
 
 ARG DEP_RUN="pcre openssl gd tzdata"
 

README.md

@@ -4,9 +4,25 @@
 ![Docker Image Size (tag)](https://img.shields.io/docker/image-size/cupcakearmy/static/latest?style=flat-square)
 ![Docker Image Version (tag latest semver)](https://img.shields.io/docker/v/cupcakearmy/static/latest?style=flat-square)
 
-This is a little docker image for histing static content efficiently.
+This is a little docker image for hosting static content efficiently.
 **Supports ETags & Brotli/GZip** compression out of the box.
 
+Automatically builds the latest mainline and stable releases weekly.
+
+## Features
+
+- Brotli & GZip
+- ETag
+- No server tokens
+
+## Tags
+
+Tags follow the official nginx naming convention.
+
+- `mainline`, same as `latest`
+- `stable`
+- Specific version
+
 ## Quickstart 🚀
 
 ```yaml

tags/.gitignore

@@ -0,0 +1 @@
+node_modules

tags/README.md

@@ -0,0 +1,15 @@
+# tags
+
+To install dependencies:
+
+```bash
+bun install
+```
+
+To run:
+
+```bash
+bun run index.js
+```
+
+This project was created using `bun init` in bun v1.1.20. [Bun](https://bun.sh) is a fast all-in-one JavaScript runtime.

tags/bun.lock

@@ -0,0 +1,47 @@
+{
+  "lockfileVersion": 1,
+  "configVersion": 1,
+  "workspaces": {
+    "": {
+      "dependencies": {
+        "@actions/core": "latest",
+        "semver": "latest",
+      },
+      "devDependencies": {
+        "@tsconfig/strictest": "latest",
+        "@types/bun": "latest",
+        "@types/semver": "latest",
+        "typescript": "latest",
+      },
+    },
+  },
+  "packages": {
+    "@actions/core": ["@actions/core@3.0.1", "", { "dependencies": { "@actions/exec": "^3.0.0", "@actions/http-client": "^4.0.0" } }, "sha512-a6d/Nwahm9fliVGRhdhofo40HjHQasUPusmc7vBfyky+7Z+P2A1J68zyFVaNcEclc/Se+eO595oAr5nwEIoIUA=="],
+
+    "@actions/exec": ["@actions/exec@3.0.0", "", { "dependencies": { "@actions/io": "^3.0.2" } }, "sha512-6xH/puSoNBXb72VPlZVm7vQ+svQpFyA96qdDBvhB8eNZOE8LtPf9L4oAsfzK/crCL8YZ+19fKYVnM63Sl+Xzlw=="],
+
+    "@actions/http-client": ["@actions/http-client@4.0.1", "", { "dependencies": { "tunnel": "^0.0.6", "undici": "^6.23.0" } }, "sha512-+Nvd1ImaOZBSoPbsUtEhv+1z99H12xzncCkz0a3RuehINE81FZSe2QTj3uvAPTcJX/SCzUQHQ0D1GrPMbrPitg=="],
+
+    "@actions/io": ["@actions/io@3.0.2", "", {}, "sha512-nRBchcMM+QK1pdjO7/idu86rbJI5YHUKCvKs0KxnSYbVe3F51UfGxuZX4Qy/fWlp6l7gWFwIkrOzN+oUK03kfw=="],
+
+    "@tsconfig/strictest": ["@tsconfig/strictest@2.0.8", "", {}, "sha512-XnQ7vNz5HRN0r88GYf1J9JJjqtZPiHt2woGJOo2dYqyHGGcd6OLGqSlBB6p1j9mpzja6Oe5BoPqWmeDx6X9rLw=="],
+
+    "@types/bun": ["@types/bun@1.3.14", "", { "dependencies": { "bun-types": "1.3.14" } }, "sha512-h1hFqFVcvAvD9j9K7ZW7vd82aSA+rTdznZa+5bwvCwqSB1jmmfLcbIWhOLx1/+boy/xmjgCs/OMUL8hRJSmnPw=="],
+
+    "@types/node": ["@types/node@26.0.1", "", { "dependencies": { "undici-types": "~8.3.0" } }, "sha512-fc3KiUoBt6kie0N9bIW3E47vZsuaMf0PM2AaUpLCLT0s/LvX1nxAim6Fc049cNxODPpGm6qRAuUOB86SkRuPQw=="],
+
+    "@types/semver": ["@types/semver@7.7.1", "", {}, "sha512-FmgJfu+MOcQ370SD0ev7EI8TlCAfKYU+B4m5T3yXc1CiRN94g/SZPtsCkk506aUDtlMnFZvasDwHHUcZUEaYuA=="],
+
+    "bun-types": ["bun-types@1.3.14", "", { "dependencies": { "@types/node": "*" } }, "sha512-4N0ig0fEomHt5R0KCFWjovxow98rIoRwKolrYdCcknNwMekCXRnWEUvgu5soYV8QXtVsrUD8B95MBOZGPvr6KQ=="],
+
+    "semver": ["semver@7.8.5", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA=="],
+
+    "tunnel": ["tunnel@0.0.6", "", {}, "sha512-1h/Lnq9yajKY2PEbBadPXj3VxsDDu844OnaAo52UVmIzIvwwtBPIuNvkjuzBlTWpfJyUbG3ez0KSBibQkj4ojg=="],
+
+    "typescript": ["typescript@6.0.3", "", { "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" } }, "sha512-y2TvuxSZPDyQakkFRPZHKFm+KKVqIisdg9/CZwm9ftvKXLP8NRWj38/ODjNbr43SsoXqNuAisEf1GdCxqWcdBw=="],
+
+    "undici": ["undici@6.27.0", "", {}, "sha512-YmfV3YnEDzXRC5lZ2jWtWWHKGUm1zIt8AhesR1tens+HTNv+YZlN/dp6G727LOvMJ8xjP9Be7Y2Sdr96LDm+pg=="],
+
+    "undici-types": ["undici-types@8.3.0", "", {}, "sha512-j375ScV60dom+YkPFIfTLcOiPxkN/buHz5GobjLhixFuANaNs3C9l4GmrWqejgXWJ7BbJcFYpTEUkS1Ge8bpZQ=="],
+  }
+}

tags/index.ts

@@ -0,0 +1,49 @@
+import { info, setOutput, setFailed } from '@actions/core'
+import semver from 'semver'
+
+// Fetch the current versions from the download page
+const URL = `https://nginx.org/en/download.html`
+const html = await fetch(URL).then((r) => r.text())
+
+// Find all the downloadable versions
+const re = /"\/download\/nginx-(\d+\.){3}tar\.gz"/g
+const matches = html.match(re)
+
+if (!matches) {
+  setFailed(`No versions found at ${URL}`)
+  process.exit(1)
+}
+
+// Clean up the matches to semver format
+function clean(match: string): string {
+  return match.replace(/"/g, '').replace('/download/nginx-', '').replace('.tar.gz', '')
+}
+const versions = matches.map(clean)
+
+// Filter
+// Get the two most up to date versions, mainline and stable
+const [mainline, stable] = versions.sort(semver.rcompare).slice(0, 2)
+
+if (!mainline || !stable) {
+  setFailed(`Could not find mainline and stable versions`)
+  process.exit(1)
+}
+
+function convert(version: string, additional: string[] = []) {
+  return {
+    version,
+    // https://github.com/docker/metadata-action#typeraw
+    tags: [version, ...additional].map((t) => `type=raw,value=${t}`).join('\n'),
+  }
+}
+
+// Export as github action matrix
+// https://docs.github.com/en/actions/using-jobs/using-a-matrix-for-your-jobs#expanding-or-adding-matrix-configurations
+const githubActionMatrix = {
+  include: [convert(mainline, ['latest', 'mainline']), convert(stable, ['stable'])],
+}
+
+const serialised = JSON.stringify(githubActionMatrix)
+info(`Found ${versions.length} versions`)
+info(`Exporting as github action matrix: ${serialised}`)
+setOutput('matrix', serialised)

tags/mise.toml

@@ -0,0 +1,2 @@
+[tools]
+bun = "latest"

tags/package.json

@@ -0,0 +1,17 @@
+{
+  "type": "module",
+  "main": "index.ts",
+  "scripts": {
+    "fetch": "bun index.ts"
+  },
+  "dependencies": {
+    "@actions/core": "^3.0.1",
+    "semver": "^7.8.5"
+  },
+  "devDependencies": {
+    "@tsconfig/strictest": "^2.0.8",
+    "@types/bun": "^1.3.14",
+    "@types/semver": "^7.7.1",
+    "typescript": "^6.0.3"
+  }
+}

tags/tsconfig.json

@@ -0,0 +1,8 @@
+{
+  "extends": "@tsconfig/strictest",
+  "compilerOptions": {
+    "target": "ESNext",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+  },
+}