feat: unified nginx proxy deployment

.github/workflows/publish-ghcr.yml

@@ -32,40 +32,21 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      # Backend Build & Push
-      - name: Extract metadata (tags, labels) for Backend
-        id: meta-backend
+      # Unified Build & Push
+      - name: Extract metadata (tags, labels) for Unified Image
+        id: meta-unified
         uses: docker/metadata-action@v5
         with:
-          images: ${{ env.REGISTRY }}/${{ env.REPO_LC }}-backend
+          images: ${{ env.REGISTRY }}/${{ env.REPO_LC }}-unified
           tags: |
             type=raw,value=latest
             type=sha
 
-      - name: Build and push Backend image
+      - name: Build and push Unified image
         uses: docker/build-push-action@v5
         with:
           context: .
-          file: Dockerfile.backend
+          file: Dockerfile
           push: true
-          tags: ${{ steps.meta-backend.outputs.tags }}
-          labels: ${{ steps.meta-backend.outputs.labels }}
-
-      # Frontend Build & Push
-      - name: Extract metadata (tags, labels) for Frontend
-        id: meta-frontend
-        uses: docker/metadata-action@v5
-        with:
-          images: ${{ env.REGISTRY }}/${{ env.REPO_LC }}-frontend
-          tags: |
-            type=raw,value=latest
-            type=sha
-
-      - name: Build and push Frontend image
-        uses: docker/build-push-action@v5
-        with:
-          context: .
-          file: Dockerfile.frontend
-          push: true
-          tags: ${{ steps.meta-frontend.outputs.tags }}
-          labels: ${{ steps.meta-frontend.outputs.labels }}
+          tags: ${{ steps.meta-unified.outputs.tags }}
+          labels: ${{ steps.meta-unified.outputs.labels }}

Dockerfile

@@ -0,0 +1,55 @@
+# Multi-stage build for optimized unified (frontend + backend) deployment
+FROM python:3.11-slim as builder
+
+WORKDIR /app
+
+# Install build dependencies
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    build-essential \
+    && rm -rf /var/lib/apt/lists/*
+
+# Copy and install requirements
+COPY frontend/requirements.txt requirements.txt
+COPY backend/requirements.txt backend_requirements.txt
+
+RUN pip install --upgrade pip setuptools wheel && \
+    pip install --no-cache-dir -r requirements.txt && \
+    pip install --no-cache-dir -r backend_requirements.txt
+
+# Final stage
+FROM python:3.11-slim
+
+WORKDIR /app
+
+# Install runtime dependencies for executing multi-language code and Nginx for routing
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    nodejs \
+    npm \
+    g++ \
+    default-jdk \
+    dnsutils \
+    curl \
+    nginx \
+    && rm -rf /var/lib/apt/lists/*
+
+# Copy Python packages from builder
+COPY --from=builder /usr/local/lib/python3.11/site-packages /usr/local/lib/python3.11/site-packages
+COPY --from=builder /usr/local/bin /usr/local/bin
+
+# Copy application files
+COPY frontend/ frontend/
+COPY backend/ backend/
+COPY start.sh start.sh
+COPY nginx.conf /etc/nginx/nginx.conf
+
+# Make start script executable
+RUN chmod +x start.sh
+
+# Expose the single proxy port (7860 for Hugging Face or Railway dynamic PORT)
+EXPOSE 7860
+
+# Proxy Configuration
+ENV PORT=7860
+
+# Run both Streamlit app and FastAPI using the wrapper script
+CMD ["./start.sh"]

frontend/app.py

@@ -123,10 +123,10 @@ for (let num of numbers) {
 # ============================================================================
 
 # The URL used by Streamlit (server) to contact FastAPI (server)
-BACKEND_URL = os.getenv("BACKEND_URL", "https://examide-backend-production.up.railway.app")
+BACKEND_URL = os.getenv("BACKEND_URL", "http://127.0.0.1:8000")
 
-# The URL used by the browser (client JS) to contact FastAPI
-PUBLIC_BACKEND_URL = os.getenv("PUBLIC_BACKEND_URL", "https://examide-backend-production.up.railway.app")
+# The URL used by the browser (client JS) to contact the unified Nginx proxy
+PUBLIC_BACKEND_URL = os.getenv("PUBLIC_BACKEND_URL", "")
 
 
 # ============================================================================

nginx.conf

@@ -0,0 +1,48 @@
+worker_processes 1;
+
+events {
+    worker_connections 1024;
+}
+
+http {
+    include mime.types;
+    default_type application/octet-stream;
+    
+    # Increase maximum upload size if needed (e.g. for student code or large bodies)
+    client_max_body_size 50M;
+
+    server {
+        # This port will be replaced dynamically in start.sh
+        listen 7860;
+        server_name _;
+
+        # Route API to FastAPI
+        location /api/ {
+            proxy_pass http://127.0.0.1:8000/api/;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        }
+
+        # WebSocket support for Streamlit
+        location /_stcore/stream {
+            proxy_pass http://127.0.0.1:8501/_stcore/stream;
+            proxy_http_version 1.1;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header Host $host;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+            proxy_read_timeout 86400;
+        }
+
+        # Route remaining to Streamlit
+        location / {
+            proxy_pass http://127.0.0.1:8501/;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+        }
+    }
+}

start.sh

@@ -0,0 +1,24 @@
+#!/bin/bash
+
+# Update Nginx listen port based on environment variable (default 7860 for HF Spaces)
+sed -i "s/listen 7860;/listen ${PORT:-7860};/g" /etc/nginx/nginx.conf
+
+# Start the FastAPI backend in the background on localhost
+cd /app/backend
+uvicorn main:app --host 127.0.0.1 --port 8000 &
+
+# Go back to /app
+cd /app
+
+# Start the Streamlit frontend in the background on localhost
+streamlit run frontend/app.py \
+    --server.port=8501 \
+    --server.address=127.0.0.1 \
+    --server.headless=true \
+    --server.enableCORS=false \
+    --server.enableXsrfProtection=false \
+    --server.enableWebsocketCompression=false &
+
+# Start Nginx in the foreground to keep the container alive
+echo "Starting Nginx Proxy on port ${PORT:-7860}..."
+nginx -g "daemon off;"