refactor(ci): add docker-build-push job to release ci

Author: Akinator31

.dockerignore

@@ -0,0 +1,35 @@
+.git
+.gitignore
+.github
+
+rustmail/*
+rustmail_panel/
+rustmail_types/
+target/
+**/Cargo.toml
+**/Cargo.lock
+
+*.md
+LICENSE
+docs/
+
+*.yml
+*.yaml
+
+*.swp
+*.swo
+*~
+.DS_Store
+.vscode
+.idea
+
+db/
+*.db
+*.sqlite
+config.toml
+
+rustmail-*.tar.gz
+rustmail-*.zip
+
+tests/
+**/*_test.rs

.github/workflows/release-ci.yml

@@ -2,6 +2,7 @@ name: Release
 
 permissions:
   contents: write
+  packages: write
 
 on:
   push:
@@ -59,7 +60,7 @@ jobs:
           else
               prerelease=""
           fi
-          
+
           gh release create "$tag" \
           --repo="$GITHUB_REPOSITORY" \
           --title="${GITHUB_REPOSITORY#*/} ${tag#v}" \
@@ -114,4 +115,61 @@ jobs:
 
           zip: windows
 
-          token: ${{ secrets.GT_TOKEN }}
+          token: ${{ secrets.GT_TOKEN }}
+
+  docker-build-push:
+    name: Build and push Docker Image
+    needs: upload-assets
+    runs-on: ubuntu-latest
+    env:
+      REGISTRY: ghcr.io
+      IMAGE_NAME: ${{ github.repository }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Download Linux binary from release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          rm -rf rustmail
+          
+          gh release download ${{ github.ref_name }} \
+            --repo ${{ github.repository }} \
+            --pattern 'rustmail-x86_64-unknown-linux-gnu.tar.gz'
+
+          tar -xzf rustmail-x86_64-unknown-linux-gnu.tar.gz
+          chmod +x rustmail
+          ls -lh rustmail
+
+      - name: Extract metadata for Docker
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          tags: |
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=semver,pattern={{major}}
+            type=raw,value=latest,enable=${{ !contains(github.ref, 'alpha') && !contains(github.ref, 'beta') }}
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          platforms: linux/amd64
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

Dockerfile

@@ -0,0 +1,25 @@
+FROM debian:bookworm-slim
+
+WORKDIR /app
+
+RUN apt-get update && apt-get install -y \
+    libssl3 \
+    ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY rustmail /app/rustmail
+
+RUN mkdir -p /app/db && chmod 755 /app/db
+
+RUN chmod +x /app/rustmail
+
+RUN useradd -m -u 1000 rustmail && \
+    chown -R rustmail:rustmail /app
+
+USER rustmail
+
+EXPOSE 3002
+
+VOLUME ["/app/db", "/app/config.toml"]
+
+ENTRYPOINT ["/app/rustmail"]