WIP: Release/3.0.0

.docker/nginx.conf

@@ -7,7 +7,6 @@ events {
     worker_connections  1024;
 }
 
-
 http {
     proxy_temp_path /tmp/proxy_temp;
     client_body_temp_path /tmp/client_temp;
@@ -18,7 +17,7 @@ http {
     include       /etc/nginx/mime.types;
     default_type  application/octet-stream;
 
-    set_real_ip_from 172.16.0.0/8;
+    set_real_ip_from 172.16.0.0/16;
     real_ip_recursive on;
     real_ip_header X-Forwarded-For;
 

.docker/templates/default.conf.template

@@ -4,6 +4,13 @@ server {
 
     root ${NGINX_WEB_ROOT};
 
+    client_max_body_size ${NGINX_MAX_BODY_SIZE};
+
+    # This also needs to be set in the single server tag and not only in http.
+    set_real_ip_from 172.16.0.0/16;
+    real_ip_recursive on;
+    real_ip_header X-Forwarded-For;
+
     location / {
         # try to serve file directly, fallback to index.php
         try_files $uri /index.php$is_args$args;

.editorconfig

@@ -1,4 +1,4 @@
-# Drupal editor configuration normalization
+# Editor configuration normalization
 # @see http://editorconfig.org/
 
 # This is the top-most .editorconfig file; do not search in parent directories.
@@ -8,13 +8,13 @@ root = true
 [*]
 end_of_line = LF
 indent_style = space
-indent_size = 4
+indent_size = 2
 charset = utf-8
 trim_trailing_whitespace = true
 insert_final_newline = true
 
-[*.{js,scss}]
-indent_size = 2
+[config/**.{yml,yaml}]
+indent_size = 4
 
-[docker-compose*.yml]
-indent_size = 2
+[*.php]
+indent_size = 4

.env

@@ -1,5 +1,6 @@
-COMPOSE_PROJECT_NAME=displayapiservice
-COMPOSE_DOMAIN=displayapiservice.local.itkdev.dk
+COMPOSE_PROJECT_NAME=display
+COMPOSE_DOMAIN=display.local.itkdev.dk
+ITKDEV_TEMPLATE=symfony-6
 
 # In all environments, the following files are loaded if they exist,
 # the latter taking precedence over the former:
@@ -108,3 +109,24 @@ EVENTDATABASE_API_V2_CACHE_EXPIRE_SECONDS=300
 
 TRACK_SCREEN_INFO=false
 TRACK_SCREEN_INFO_UPDATE_INTERVAL_SECONDS=300
+
+###> Admin configuration ###
+### Will be injected in the html of the admin page.
+ADMIN_REJSEPLANEN_APIKEY=
+ADMIN_SHOW_SCREEN_STATUS=false
+ADMIN_TOUCH_BUTTON_REGIONS=false
+ADMIN_LOGIN_METHODS='[{"type":"username-password","enabled":true,"provider":"username-password","label":""}]'
+ADMIN_ENHANCED_PREVIEW=false
+###< Admin configuration ###
+
+###> Client configuration ###
+### Will be injected in the html of the client page.
+CLIENT_LOGIN_CHECK_TIMEOUT=20000
+CLIENT_REFRESH_TOKEN_TIMEOUT=300000
+CLIENT_RELEASE_TIMESTAMP_INTERVAL_TIMEOUT=600000
+CLIENT_SCHEDULING_INTERVAL=60000
+CLIENT_PULL_STRATEGY_INTERVAL=90000
+CLIENT_COLOR_SCHEME='{"type":"library","lat":56.0,"lng":10.0}'
+CLIENT_DEBUG=false
+CLIENT_LOGGING='[]'
+###< Client configuration ###

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,6 +1,6 @@
-#### Link to ticket
+#### Link to issue
 
-Please add a link to the ticket being addressed by this change.
+Please add a link to the issue being addressed by this change.
 
 #### Description
 
@@ -17,7 +17,7 @@ If your change affects the user interface you should include a screenshot of the
 - [ ] My code passes our static analysis suite.
 - [ ] My code passes our continuous integration process.
 
-If your code does not pass all the requirements on the checklist you have to add a comment explaining why this change 
+If your code does not pass all the requirements on the checklist you have to add a comment explaining why this change
 should be exempt from the list.
 
 #### Additional comments or questions

.github/workflows/apispec.yaml

@@ -0,0 +1,50 @@
+on: pull_request
+
+name: Api Spec
+
+jobs:
+  apispec:
+    runs-on: ubuntu-latest
+    name: API Specification validation
+    strategy:
+      fail-fast: false
+      matrix:
+        php: ["8.3"]
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 2
+
+      - name: Setup PHP, with composer and extensions
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: ${{ matrix.php}}
+          extensions: apcu, ctype, iconv, imagick, json, redis, soap, xmlreader, zip
+          coverage: none
+
+      - name: Get composer cache directory
+        id: composer-cache
+        run: echo "dir=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT
+
+      - name: Cache composer dependencies
+        uses: actions/cache@v4
+        with:
+          path: ${{ steps.composer-cache.outputs.dir }}
+          key: ${{ matrix.php }}-composer-${{ hashFiles('**/composer.lock') }}
+          restore-keys: ${{ matrix.php }}-composer-
+
+      - name: Install Dependencies
+        run: composer install -q --no-ansi --no-interaction --no-scripts --no-suggest --no-progress --prefer-dist
+
+      - name: Export specifications (yaml)
+        run: bin/console api:openapi:export --yaml --output=public/api-spec-v2.yaml --no-interaction
+
+      - name: Check for changes in specifications (yaml)
+        run: git diff --diff-filter=ACMRT --exit-code public/api-spec-v2.yaml
+
+      - name: Export specifications (json)
+        run: bin/console api:openapi:export --output=public/api-spec-v2.json --no-interaction
+
+      - name: Check for changes in specifications (json)
+        run: git diff --diff-filter=ACMRT --exit-code public/api-spec-v2.json

.github/workflows/changelog.yaml

@@ -0,0 +1,29 @@
+# Do not edit this file! Make a pull request on changing
+# github/workflows/changelog.yaml in
+# https://github.com/itk-dev/devops_itkdev-docker if need be.
+
+### ### Changelog
+###
+### Checks that changelog has been updated
+
+name: Changelog
+
+on:
+  pull_request:
+
+jobs:
+  changelog:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 2
+
+      - name: Git fetch
+        run: git fetch
+
+      - name: Check that changelog has been updated.
+        run: git diff --exit-code origin/${{ github.base_ref }} -- CHANGELOG.md && exit 1 || exit 0

.github/workflows/composer.yaml

@@ -0,0 +1,68 @@
+# Do not edit this file! Make a pull request on changing
+# github/workflows/composer.yaml in
+# https://github.com/itk-dev/devops_itkdev-docker if need be.
+
+### ### Composer
+###
+### Validates composer.json and checks that it's normalized.
+###
+### #### Assumptions
+###
+### 1. A docker compose service named `phpfpm` can be run and `composer` can be
+###    run inside the `phpfpm` service.
+### 2. [ergebnis/composer-normalize](https://github.com/ergebnis/composer-normalize)
+###    is a dev requirement in `composer.json`:
+###
+###    ``` shell
+###    docker compose run --rm phpfpm composer require --dev ergebnis/composer-normalize
+###    ```
+###
+###    Normalize `composer.json` by running
+###
+###    ``` shell
+###    docker compose run --rm phpfpm composer normalize
+###    ```
+
+name: Composer
+
+env:
+  COMPOSE_USER: runner
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+      - develop
+
+jobs:
+  composer-validate:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+    steps:
+      - uses: actions/checkout@v4
+      - run: |
+          docker network create frontend
+          docker compose run --rm phpfpm composer validate --strict
+
+  composer-normalized:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+    steps:
+      - uses: actions/checkout@v4
+      - run: |
+          docker network create frontend
+          docker compose run --rm phpfpm composer install
+          docker compose run --rm phpfpm composer normalize --dry-run
+
+  composer-audit:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+    steps:
+      - uses: actions/checkout@v4
+      - run: |
+          docker network create frontend
+          docker compose run --rm phpfpm composer audit --locked

.github/workflows/composer_install.yaml

@@ -0,0 +1,40 @@
+on: pull_request
+
+name: Composer install
+
+jobs:
+  test-composer-install:
+    runs-on: ubuntu-latest
+    env:
+      COMPOSER_ALLOW_SUPERUSER: 1
+    strategy:
+      fail-fast: false
+      matrix:
+        php: ["8.3"]
+    name: Composer install in prod mode (PHP ${{ matrix.php}})
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup PHP, with composer and extensions
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: ${{ matrix.php}}
+          extensions: apcu, ctype, iconv, imagick, json, redis, soap, xmlreader, zip
+          coverage: none
+
+      - name: Get composer cache directory
+        id: composer-cache
+        run: echo "dir=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT
+
+      - name: Cache composer dependencies
+        uses: actions/cache@v4
+        with:
+          path: ${{ steps.composer-cache.outputs.dir }}
+          key: ${{ matrix.php }}-composer-${{ hashFiles('**/composer.lock') }}
+          restore-keys: ${{ matrix.php }}-composer-
+
+      - name: "[prod] Composer install with exported .env variables"
+        run: |
+          set -a && source .env && set +a
+          APP_ENV=prod composer install --no-dev -o

.github/workflows/doctrine.yaml

@@ -0,0 +1,57 @@
+on: pull_request
+
+name: Doctrine
+
+jobs:
+  validate-doctrine-shema:
+    runs-on: ubuntu-latest
+    env:
+      DATABASE_URL: mysql://db:[email protected]:3306/db?serverVersion=mariadb-10.5.13
+    strategy:
+      fail-fast: false
+      matrix:
+        php: ["8.3"]
+    name: Validate Schema (PHP ${{ matrix.php}})
+    services:
+      mariadb:
+        image: mariadb:10.5.13
+        env:
+          MYSQL_USER: db
+          MYSQL_PASSWORD: db
+          MYSQL_DATABASE: db
+          MYSQL_ROOT_PASSWORD: db
+        ports:
+          - 3306:3306
+        options: --health-cmd="mysqladmin ping" --health-interval=10s --health-timeout=5s --health-retries=3
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup PHP, with composer and extensions
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: ${{ matrix.php}}
+          extensions: apcu, ctype, iconv, imagick, json, redis, soap, xmlreader, zip
+          coverage: none
+
+      - name: Get composer cache directory
+        id: composer-cache
+        run: echo "dir=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT
+
+      - name: Cache composer dependencies
+        uses: actions/cache@v4
+        with:
+          path: ${{ steps.composer-cache.outputs.dir }}
+          key: ${{ matrix.php }}-composer-${{ hashFiles('**/composer.lock') }}
+          restore-keys: ${{ matrix.php }}-composer-
+
+      - name: "Composer install with exported .env variables"
+        run: |
+          set -a && source .env && set +a
+          APP_ENV=prod composer install --no-dev -o
+
+      - name: Run Doctrine Migrations
+        run: APP_ENV=prod php bin/console doctrine:migrations:migrate --no-interaction
+
+      - name: Validate Doctrine schema
+        run: APP_ENV=prod php bin/console doctrine:schema:validate

.github/workflows/github_build_release.yml

@@ -1,7 +1,7 @@
 on:
   push:
     tags:
-      - '*.*.*'
+      - "*.*.*"
 
 name: Create Github Release