FROM node:22-alpine AS build
WORKDIR /app
COPY package*.json ./
RUN npm ci
COPY . .
RUN npm run build

FROM nginx:alpine
COPY --from=build /app/dist /usr/share/nginx/html
EXPOSE 80

services:
  web:
    image: nginx:alpine
    ports: ["8080:80"]
  db:
    image: mariadb:11
    environment:
      MARIADB_ROOT_PASSWORD: secreto
    volumes: ["db_data:/var/lib/mysql"]
volumes:
  db_data:

apiVersion: apps/v1
kind: Deployment
metadata:
  name: web
spec:
  replicas: 3
  selector:
    matchLabels: { app: web }
  template:
    metadata:
      labels: { app: web }
    spec:
      containers:
        - name: nginx
          image: nginx:1.27
          ports:
            - containerPort: 80
---
apiVersion: v1
kind: Service
metadata:
  name: web
spec:
  selector: { app: web }
  ports:
    - port: 80
      targetPort: 80

spec:
  containers:
    - name: api
      image: mi-api:1.4
      envFrom:
        - configMapRef: { name: api-config }
      resources:
        requests: { cpu: 100m, memory: 128Mi }
        limits: { cpu: 500m, memory: 256Mi }
      readinessProbe:
        httpGet: { path: /ready, port: 8080 }
      livenessProbe:
        httpGet: { path: /health, port: 8080 }

apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: datos
spec:
  accessModes: [ReadWriteOnce]
  resources:
    requests:
      storage: 2Gi

# Dentro de spec.template.spec:
volumes:
  - name: datos
    persistentVolumeClaim: { claimName: datos }
# Dentro del contenedor:
volumeMounts:
  - name: datos
    mountPath: /var/lib/app

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: api-desde-frontend
spec:
  podSelector:
    matchLabels: { app: api }
  policyTypes: [Ingress]
  ingress:
    - from:
        - podSelector:
            matchLabels: { app: frontend }
      ports:
        - protocol: TCP
          port: 8080