pretalx
diff --git a/.env.build.example b/.env.build.example
@@ -0,0 +1,101 @@
+PRETALX_VERSION=2024.1.0
+
+# Base image
+BASE_IMAGE=docker.io/library/python
+BASE_TAG=3.12-bookworm
+
+PRETALX_BASE_IMAGE=docker.io/pretalx/base
+PRETALX_BASE_TAG=${BASE_TAG}
+
+##
+#
+#  Builds from packaged release versions
+#
+##
+
+# Pretalx stock image name and tag
+PRETALX_IMAGE=docker.io/pretalx/pretalx
+PRETALX_TAG=${PRETALX_VERSION}
+
+# Default image
+PRETALX_DEFAULT_BASE_IMAGE=${PRETALX_BASE_IMAGE}
+PRETALX_DEFAULT_BASE_TAG=${PRETALX_BASE_TAG}
+
+
+# Extended image with plugins
+PRETALX_EXTENDED_BASE_IMAGE=${PRETALX_IMAGE}
+PRETALX_EXTENDED_BASE_TAG=${PRETALX_TAG}
+
+PRETALX_EXTENDED_IMAGE=${PRETALX_IMAGE}-extended
+PRETALX_EXTENDED_TAG=${PRETALX_TAG}
+
+
+# Extended image and cron
+PRETALX_EXTENDED_CRON_BASE_IMAGE=${PRETALX_EXTENDED_IMAGE}
+PRETALX_EXTENDED_CRON_BASE_TAG=${PRETALX_EXTENDED_TAG}
+
+PRETALX_EXTENDED_CRON_IMAGE=${PRETALX_EXTENDED_IMAGE}
+PRETALX_EXTENDED_CRON_TAG=${PRETALX_EXTENDED_TAG}-cron
+
+
+##
+#
+#  Builds from packaged release versions for standalone usage
+#
+##
+
+
+# Standalone image
+PRETALX_STANDALONE_BASE_IMAGE=${PRETALX_IMAGE}
+PRETALX_STANDALONE_BASE_TAG=${PRETALX_TAG}
+
+PRETALX_STANDALONE_IMAGE=docker.io/pretalx/standalone
+PRETALX_STANDALONE_TAG=${PRETALX_VERSION}
+
+
+# Extended standalone image
+PRETALX_STANDALONE_EXTENDED_BASE_IMAGE=${PRETALX_STANDALONE_IMAGE}
+PRETALX_STANDALONE_EXTENDED_BASE_TAG=${PRETALX_STANDALONE_TAG}
+
+PRETALX_STANDALONE_EXTENDED_IMAGE=${PRETALX_STANDALONE_IMAGE}-extended
+PRETALX_STANDALONE_EXTENDED_TAG=${PRETALX_STANDALONE_TAG}
+
+
+# Extended standalone image with cron
+PRETALX_STANDALONE_EXTENDED_CRON_BASE_IMAGE=${PRETALX_STANDALONE_EXTENDED_IMAGE}
+PRETALX_STANDALONE_EXTENDED_CRON_BASE_TAG=${PRETALX_STANDALONE_EXTENDED_TAG}
+
+PRETALX_STANDALONE_EXTENDED_CRON_IMAGE=${PRETALX_STANDALONE_IMAGE}-extended
+PRETALX_STANDALONE_EXTENDED_CRON_TAG=${PRETALX_STANDALONE_EXTENDED_TAG}-cron
+
+
+##
+#
+#  Source builds
+#
+##
+
+
+PRETALX_REPO=https://github.com/pretalx/pretalx.git
+PRETALX_REF=main
+
+
+# Extended build from remote source with cron
+PRETALX_SOURCE_EXTENDED_CRON_IMAGE=${PRETALX_EXTENDED_IMAGE}
+PRETALX_SOURCE_EXTENDED_CRON_TAG=${PRETALX_REF}-source-remote-cron
+
+
+# Standalone build, from local or remote source
+PRETALX_SOURCE_STANDALONE_IMAGE=${PRETALX_STANDALONE_IMAGE}
+PRETALX_SOURCE_STANDALONE_TAG=${PRETALX_REF}-source
+
+PRETALX_SOURCE_STANDALONE_LOCAL_TAG=${PRETALX_SOURCE_STANDALONE_TAG}-local
+PRETALX_SOURCE_STANDALONE_REMOTE_TAG=${PRETALX_SOURCE_STANDALONE_TAG}-remote
+
+
+# Standalone extended build from remote source with cron
+PRETALX_SOURCE_STANDALONE_EXTENDED_CRON_BASE_IMAGE=${PRETALX_SOURCE_STANDALONE_IMAGE}
+PRETALX_SOURCE_STANDALONE_EXTENDED_CRON_BASE_TAG=${PRETALX_SOURCE_STANDALONE_REMOTE_TAG}
+
+PRETALX_SOURCE_STANDALONE_EXTENDED_CRON_IMAGE=${PRETALX_SOURCE_STANDALONE_IMAGE}-extended
+PRETALX_SOURCE_STANDALONE_EXTENDED_CRON_TAG=${PRETALX_SOURCE_STANDALONE_REMOTE_TAG}-cron
diff --git a/.env.example b/.env.example
@@ -0,0 +1,54 @@
+PRETALX_VERSION=2024.1.0
+
+PRETALX_IMAGE=docker.io/pretalx/pretalx
+PRETALX_TAG=${PRETALX_VERSION}
+
+FQDN=localhost.local
+
+POSTGRES_PASSWORD=veryunsecureplschange
+POSTGRES_USER=pretalx
+POSTGRES_DB=pretalx
+
+PRETALX_LOG_LEVEL=info
+
+PRETALX_DEBUG=False
+PRETALX_SITE_URL=http://localhost:8080
+
+PRETALX_LANGUAGE_CODE=en
+PRETALX_TIME_ZONE=UTC
+
+PRETALX_DATA_DIR=/data
+PRETALX_FILESYSTEM_LOGS=/data/logs
+
+PRETALX_FILESYSTEM_MEDIA=/public/media
+PRETALX_FILESYSTEM_STATIC=/public/static
+
+PRETALX_SITE_CSP=
+PRETALX_SITE_CSP_STYLE=
+PRETALX_SITE_CSP_SCRIPT=
+PRETALX_SITE_CSP_IMG=
+PRETALX_SITE_CSP_FORM=
+
+PRETALX_LOGGING_EMAIL=
+PRETALX_LOGGING_EMAIL_LEVEL=ERROR
+
+#PRETALX_MAIL_FROM=admin@localhost
+#PRETALX_MAIL_HOST=localhost
+#PRETALX_MAIL_PORT=25
+#PRETALX_MAIL_USER=
+#PRETALX_MAIL_PASSWORD=
+#PRETALX_MAIL_TLS=False
+#PRETALX_MAIL_SSL=False
+
+PRETALX_DB_NAME=${POSTGRES_DB}
+PRETALX_DB_USER=${POSTGRES_USER}
+PRETALX_DB_PASS=${POSTGRES_PASSWORD}
+PRETALX_DB_TYPE=postgresql
+PRETALX_DB_HOST=postgres
+PRETALX_DB_PORT=5432
+
+PRETALX_REDIS=redis://redis/0
+PRETALX_REDIS_SESSIONS=true
+
+PRETALX_CELERY_BACKEND=redis://redis/1
+PRETALX_CELERY_BROKER=redis://redis/2
diff --git a/.github/workflows/build-and-push.yml b/.github/workflows/build-and-push.yml
@@ -0,0 +1,162 @@
+name: Build/Push OCI image
+
+on:
+  workflow_call:
+    inputs:
+
+      ref:
+        description: "Reference for a git object to check out, string"
+        required: false
+        type: string
+        default: ${{ github.ref }}
+
+
+      platforms:
+        description: "Mandatory comma-separated list of CPU platforms to build for, string"
+        required: false
+        type: string
+        default: linux/amd64,linux/arm64
+      image-name:
+        description: "Mandatory name of the image to build, string"
+        required: true
+        type: string
+        default: ${{ github.event.repository.name }}
+
+
+      build-args:
+        description: "Optional build arguments, takes a YAML multiline string | with ENV=variables"
+        type: string
+        required: false
+        default: ""
+      image-tags:
+        description: "Optional additional image tags, takes a YAML multiline string |"
+        type: string
+        required: false
+        default: ""
+      context:
+        description: "Optional build context, defaults to the ref that triggered the run, and not ./ in the checkout root, string"
+        type: string
+        required: false
+        default: "."
+      file:
+        description: "Optional path to a Dockerfile to build, relative to the build context, string"
+        type: string
+        required: false
+        default: Dockerfile
+
+
+      docker_io:
+        description: "Optional toggle for disabling Docker Hub Registry, boolean"
+        type: boolean
+        required: false
+        default: true
+      ghcr_io:
+        description: "Optional toggle for disabling GitHub Container Registry, boolean"
+        type: boolean
+        required: false
+        default: true
+
+    outputs:
+      imageid:
+        description: "Image ID, String"
+        value: ${{ jobs.build-and-push.outputs.imageid }}
+      digest:
+        description: "Image digest, String"
+        value: ${{ jobs.build-and-push.outputs.digest }}
+      metadata:
+        description: "Build result metadata, JSON"
+        value: ${{ jobs.build-and-push.outputs.metadata }}
+
+
+jobs:
+
+  build-and-push:
+
+    name: Build/Push image
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+      packages: write
+
+    outputs:
+      imageid:  ${{ steps.build-push.outputs.imageid }}
+      digest:   ${{ steps.build-push.outputs.digest }}
+      metadata: ${{ steps.build-push.outputs.metadata }}
+
+    env:
+      docker_io: ${{ inputs.docker_io && secrets.DOCKER_USERNAME != null && secrets.DOCKER_PASSWORD != null }}
+
+    steps:
+
+    -
+      name: Checkout repository
+      uses: actions/checkout@v4
+      with:
+        ref: ${{ inputs.ref }}
+
+    -
+      name: Docker meta
+      id: meta
+      uses: docker/metadata-action@v5
+      with:
+        context: git
+        images: |
+          name=ghcr.io/${{ github.repository_owner }}/${{ inputs.image-name }},enable=${{ inputs.ghcr_io }}
+          name=docker.io/${{ github.repository_owner }}/${{ inputs.image-name }},enable=${{ env.docker_io }}
+        labels: |
+          org.opencontainers.image.title=${{ inputs.image-name }}
+          org.opencontainers.image.vendor=Pretalx Community
+          org.opencontainers.image.description=An unprivileged Pretalx container image for use with the PostgreSQL database and prepared to be used with cron.
+          org.opencontainers.image.licenses=CC0
+
+        tags: |
+          type=semver,pattern={{ version }}
+          type=semver,pattern={{ major }}.{{ minor }}
+          type=ref,event=branch
+          type=ref,event=tag
+          type=ref,event=pr
+          {{ sha }}
+          ${{ inputs.image-tags }}
+
+    - name: Set up QEMU
+      uses: docker/setup-qemu-action@v3
+
+    -
+      name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@v3
+
+
+    -
+      name: Login to Docker Hub Registry
+      uses: docker/login-action@v3
+      if: github.event_name != 'pull_request' && env.docker_io == 'true'
+      with:
+        registry: "docker.io"
+        username: ${{ secrets.DOCKER_USERNAME }}
+        password: ${{ secrets.DOCKER_PASSWORD }}
+
+    -
+      name: Login to GitHub Packages Registry
+      uses: docker/login-action@v3
+      if: github.event_name != 'pull_request' && inputs.ghcr_io
+      with:
+        registry: ghcr.io
+        username: ${{ github.repository_owner }}
+        password: ${{ secrets.GITHUB_TOKEN }}
+
+
+
+    -
+      name: Build and push Container image
+      uses: docker/build-push-action@v5
+      id: build-push
+      with:
+        push:       "${{ github.event_name != 'pull_request' }}"
+        provenance: false
+        platforms:  "${{ inputs.platforms }}"
+        context:    "{{ defaultContext }}:${{ inputs.context }}"
+        file:       "${{ inputs.file }}"
+        build-args: "${{ inputs.build-args }}"
+        tags:       "${{ steps.meta.outputs.tags }}"
+        labels:     "${{ steps.meta.outputs.labels }}"