fix: ci

.dockerignore

@@ -1,3 +1,4 @@
 secret.key
 .env
 Cargo.lock
+target/

.github/workflows/build.yaml

@@ -7,6 +7,11 @@ jobs:
     name: beatforge_api
     runs-on: ubuntu-latest
     steps:
+      - uses: docker/login-action@v1
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
       - uses: actions/checkout@v2
       - uses: actions-rs/toolchain@v1
         with:
@@ -22,11 +27,6 @@ jobs:
           args: --release
 
       # publish to ghcr.io and publish artifact
-      - uses: docker/login-action@v1
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
       - uses: docker/build-push-action@v2
         with:
           context: .

Dockerfile

@@ -1,7 +1,17 @@
 FROM rust:latest
 
+LABEL org.opencontainers.image.source=https://github.com/beat-forge/api
+
+WORKDIR /app
+
 COPY . .
 
 RUN cargo build --release
 
-CMD ["./target/release/gql-api"]
+RUN mv ./target/release/gql-api .
+
+RUN rm -rf ./target
+
+EXPOSE 8080
+
+CMD ["./gql-api"]

src/main.rs

@@ -52,15 +52,16 @@ pub struct Key([u8; 1024]);
 
 lazy_static::lazy_static! {
     pub static ref KEY: Arc<Key> = {
-        if !Path::new("./secret.key").exists() {
+        if !Path::new("./data/secret.key").exists() {
+            let _ = std::fs::create_dir(Path::new("./data"));
             let mut rng = rand::thread_rng();
             let key: Vec<u8> = (0..1024).map(|_| rng.gen::<u8>()).collect();
-            std::fs::write("./secret.key", key).unwrap();
+            std::fs::write("./data/secret.key", key).unwrap();
 
             println!("Generated secret key (first run)");
         }
 
-        Arc::new(Key(std::fs::read("./secret.key").unwrap().try_into().unwrap()))
+        Arc::new(Key(std::fs::read("./data/secret.key").unwrap().try_into().unwrap()))
     };
 }