# deployment.yaml - 使用 gh-proxy.org/docker 加速镜像
apiVersion: apps/v1
kind: Deployment
metadata:
  name: nginx-deployment
spec:
  replicas: 3
  selector:
    matchLabels:
      app: nginx
  template:
    metadata:
      labels:
        app: nginx
    spec:
      containers:
        - name: nginx
          image: gh-proxy.org/docker/ghcr.io/nginxinc/nginx-unprivileged:latest
          ports:
            - containerPort: 80
        - name: redis
          image: gh-proxy.org/docker/ghcr.io/bitnami/redis:alpine
          ports:
            - containerPort: 6379

# docker-compose.yml - 使用 gh-proxy.org/docker 加速镜像
version: '3.8'
services:
  web:
    image: gh-proxy.org/docker/ghcr.io/nginxinc/nginx-unprivileged:latest
    ports:
      - '80:80'
    volumes:
      - ./html:/usr/share/nginx/html

  database:
    image: gh-proxy.org/docker/mcr.microsoft.com/mssql/server:2022-latest
    environment:
      ACCEPT_EULA: Y
      SA_PASSWORD: 'MyStrongPassword123!'
    volumes:
      - mssql_data:/var/opt/mssql

  cache:
    image: gh-proxy.org/docker/ghcr.io/bitnami/redis:alpine
    ports:
      - '6379:6379'

volumes:
  mssql_data:

# 在 Dockerfile 中使用 gh-proxy.org 加速基础镜像
FROM gh-proxy.org/docker/ghcr.io/nodejs/node:18-alpine AS builder

WORKDIR /app
COPY package*.json ./
RUN npm install

COPY . .
RUN npm run build

# 生产阶段
FROM gh-proxy.org/docker/ghcr.io/nginxinc/nginx-unprivileged:latest
COPY --from=builder /app/dist /usr/share/nginx/html

# 使用微软容器注册表的 .NET 镜像
FROM gh-proxy.org/docker/mcr.microsoft.com/dotnet/aspnet:8.0 AS runtime
WORKDIR /app
COPY --from=builder /app/publish .
ENTRYPOINT ["dotnet", "MyApp.dll"]

# GitHub Actions - 使用 gh-proxy.org/docker 加速容器构建
name: Build and Deploy
on: [push]

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Build with accelerated base images
        run: |
          # 构建时使用代理的基础镜像
          docker build -t myapp:latest \
            --build-arg BASE_IMAGE=gh-proxy.org/docker/ghcr.io/nodejs/node:18-alpine .

      - name: Test with accelerated images
        run: |
          # 使用加速镜像进行测试
          docker run --rm \
            gh-proxy.org/docker/mcr.microsoft.com/dotnet/runtime:8.0 \
            dotnet --version

# 配置 Podman 使用镜像加速
# 编辑 /etc/containers/registries.conf
[[registry]]
prefix = "ghcr.io"
location = "gh-proxy.org/docker/ghcr.io"

# 或者在命令行直接拉取代理路径：
podman pull gh-proxy.org/docker/ghcr.io/alpine/alpine:latest
podman pull gh-proxy.org/docker/ghcr.io/nginxinc/nginx-unprivileged:latest

# 配置 containerd 使用加速通道
# 编辑 /etc/containerd/config.toml
[plugins."io.containerd.grpc.v1.cri".registry.mirrors]
  [plugins."io.containerd.grpc.v1.cri".registry.mirrors."ghcr.io"]
    endpoint = ["https://gh-proxy.org/docker/ghcr.io"]
  [plugins."io.containerd.grpc.v1.cri".registry.mirrors."gcr.io"]
    endpoint = ["https://gh-proxy.org/docker/gcr.io"]

# 重启 containerd 生效
sudo systemctl restart containerd