chore(ci): Publish container images to ghcr.io

.github/workflows/release.yaml

@@ -0,0 +1,27 @@
+name: Release
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+    tags:
+      - 'v*.*.*'
+
+env:
+  IMAGES_PROTOCOL: 'https'
+  IMAGES_HOSTNAME: '*'
+  IMAGES_PORT: '443'
+
+jobs:
+  release-next-container:
+    uses: radiorabe/actions/.github/workflows/[email protected]
+    with:
+      image: 'ghcr.io/radiorabe/website-next'
+      name: 'website-next'
+      display-name: 'RaBe Nextjs Website'
+      tags: 'rabe nextjs alpine'
+      # the alpine base image used for the nextjs frontend does not have a
+      # keyless cosign signature, so we disable verifying the image.
+      cosign-verify: false
+      context: './next/'
+      dockerfile: './next/Dockerfile.prod'

next/Dockerfile.prod

@@ -20,6 +20,12 @@ RUN \
 
 # Rebuild the source code only when needed
 FROM base AS builder
+
+# defaults for use during the container build phase on CI/CD
+ARG IMAGES_PROTOCOL=https
+ARG IMAGES_HOSTNAME=**
+ARG IMAGES_PORT=433
+
 WORKDIR /app
 COPY --from=deps /app/node_modules ./node_modules
 COPY . .