ci: 添加 Docker 镜像发布工作流并更新构建参数

添加 GitHub Actions 工作流以自动构建和推送 Docker 镜像，同时更新 Dockerfile 和 docker-compose.yml 以支持构建参数的传递。这些更改旨在简化镜像发布流程并确保构建时正确读取环境变量。

Author: ExquisiteCore

.github/workflows/docker-publish.yml

@@ -0,0 +1,78 @@
+name: Docker 镜像发布
+
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+
+jobs:
+  build-and-push:
+    name: 构建并推送Docker镜像
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: 检出代码
+        uses: actions/checkout@v4
+
+      - name: 设置 Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: 登录到 GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: 提取元数据
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: |
+            ghcr.io/${{ github.repository }}/backend
+            ghcr.io/${{ github.repository }}/frontend
+          tags: |
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=ref,event=branch
+            type=sha,format=short
+
+      - name: 构建并推送后端镜像
+        uses: docker/build-push-action@v5
+        with:
+          context: ./backend
+          push: true
+          tags: ghcr.io/${{ github.repository }}/backend:${{ steps.meta.outputs.version }},ghcr.io/${{ github.repository }}/backend:latest
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+      - name: 构建并推送前端镜像
+        uses: docker/build-push-action@v5
+        with:
+          context: ./blog-web
+          push: true
+          tags: ghcr.io/${{ github.repository }}/frontend:${{ steps.meta.outputs.version }},ghcr.io/${{ github.repository }}/frontend:latest
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          build-args: |
+            PUBLIC_API_BASE_URL=http://localhost:8080/api
+            INTERNAL_API_BASE_URL=http://backend:8080/api
+
+      - name: 更新 Docker Compose 文件
+        run: |
+          VERSION=${{ steps.meta.outputs.version }}
+          sed -i "s|build:\s*context: ./backend|image: ghcr.io/${{ github.repository }}/backend:${VERSION}|g" docker-compose.yml
+          sed -i "s|build:\s*context: ./blog-web|image: ghcr.io/${{ github.repository }}/frontend:${VERSION}|g" docker-compose.yml
+
+      - name: 创建 Docker Compose 发布文件
+        run: |
+          cp docker-compose.yml docker-compose.release.yml
+
+      - name: 上传 Docker Compose 文件作为发布资产
+        uses: softprops/action-gh-release@v1
+        with:
+          files: docker-compose.release.yml
+          token: ${{ secrets.GITHUB_TOKEN }}

blog-web/Dockerfile

@@ -49,6 +49,14 @@ FROM node:20-slim
 
 WORKDIR /app
 
+# 声明构建参数，接受 docker-compose 传入的 args
+ARG PUBLIC_API_BASE_URL
+ARG INTERNAL_API_BASE_URL
+
+# 设置环境变量，供构建时读取
+ENV PUBLIC_API_BASE_URL=$PUBLIC_API_BASE_URL
+ENV INTERNAL_API_BASE_URL=$INTERNAL_API_BASE_URL
+
 RUN npm install -g pnpm
 # Copy built application from the builder stage
 COPY --from=builder /app/dist /app/dist

docker-compose.yml

@@ -33,12 +33,13 @@ services:
   frontend:
     build:
       context: ./blog-web
+      args:
+        PUBLIC_API_BASE_URL: "http://localhost:8080/api"
+        INTERNAL_API_BASE_URL: "http://backend:8080/api"
     container_name: blog-frontend
     environment:
       - HOST=0.0.0.0
       - PORT=4321
-      - PUBLIC_API_BASE_URL=http://localhost:8080/api
-      - INTERNAL_API_BASE_URL=http://backend:8080/api
     ports:
       - "4321:4321"
     depends_on: