feat: add Dockerfile, nginx config and K8s manifests

.dockerignore

@@ -0,0 +1,6 @@
+node_modules
+dist
+.git
+.astro
+.DS_Store
+.claude

Dockerfile

@@ -0,0 +1,25 @@
+# --- Stage 1: Build ---
+FROM node:22-alpine AS build
+WORKDIR /app
+
+# Install pnpm
+RUN corepack enable && corepack prepare pnpm@latest --activate
+
+# Install dependencies first (cache layer)
+COPY package.json pnpm-lock.yaml ./
+RUN pnpm install --frozen-lockfile
+
+# Copy source and build
+COPY . .
+RUN pnpm build
+
+# --- Stage 2: Serve ---
+FROM nginx:alpine AS runtime
+
+# Custom nginx config
+COPY nginx.conf /etc/nginx/conf.d/default.conf
+
+# Copy built static files
+COPY --from=build /app/dist /usr/share/nginx/html
+
+EXPOSE 80

k8s/deployment.yml

@@ -0,0 +1,43 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: aurelie-portfolio
+  namespace: portfolio
+  labels:
+    app: aurelie-portfolio
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app: aurelie-portfolio
+  template:
+    metadata:
+      labels:
+        app: aurelie-portfolio
+    spec:
+      containers:
+        - name: aurelie-portfolio
+          image: git.arthurbarre.fr/ordinarthur/aurelie-portfolio:latest
+          ports:
+            - containerPort: 80
+          resources:
+            requests:
+              memory: "64Mi"
+              cpu: "50m"
+            limits:
+              memory: "128Mi"
+              cpu: "200m"
+          livenessProbe:
+            httpGet:
+              path: /
+              port: 80
+            initialDelaySeconds: 5
+            periodSeconds: 30
+          readinessProbe:
+            httpGet:
+              path: /
+              port: 80
+            initialDelaySeconds: 3
+            periodSeconds: 10
+      imagePullSecrets:
+        - name: gitea-registry-secret

k8s/ingress.yml

@@ -0,0 +1,35 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: aurelie-portfolio
+  namespace: portfolio
+  annotations:
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.tls: "true"
+    traefik.ingress.kubernetes.io/router.tls.certresolver: letsencrypt
+spec:
+  rules:
+    - host: aureliebarre.fr
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: aurelie-portfolio
+                port:
+                  number: 80
+    - host: www.aureliebarre.fr
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: aurelie-portfolio
+                port:
+                  number: 80
+  tls:
+    - hosts:
+        - aureliebarre.fr
+        - www.aureliebarre.fr

k8s/namespace.yml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: portfolio

k8s/service.yml

@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: aurelie-portfolio
+  namespace: portfolio
+spec:
+  type: NodePort
+  selector:
+    app: aurelie-portfolio
+  ports:
+    - port: 80
+      targetPort: 80
+      nodePort: 30081
+      protocol: TCP

nginx.conf

@@ -0,0 +1,22 @@
+server {
+    listen 80;
+    server_name _;
+    root /usr/share/nginx/html;
+    index index.html;
+
+    # Cache static assets
+    location ~* \.(jpg|jpeg|png|gif|ico|svg|css|js|woff2?)$ {
+        expires 30d;
+        add_header Cache-Control "public, immutable";
+    }
+
+    # Astro clean URLs fallback
+    location / {
+        try_files $uri $uri/ $uri.html /index.html;
+    }
+
+    # Gzip
+    gzip on;
+    gzip_types text/plain text/css application/json application/javascript text/xml image/svg+xml;
+    gzip_min_length 256;
+}