fix: add nginx SPA fallback

- Replace GITEA_PASSWORD with GITEA_TOKEN in environment variables
- Add validation checks for GITEA_USERNAME and GITEA_TOKEN
- Update git remote URL to include token for authentication
- Simplify push command to use configured origin remote

This change enhances security by using a token instead of a password for Git authentication in the CI pipeline.

.drone.yml

@@ -47,11 +47,15 @@ steps:
     image: alpine:3.20
     environment:
       GITEA_USERNAME:
-        from_secret: gitea_username
-      GITEA_PASSWORD:
-        from_secret: gitea_password
+        from_secret: gitea_git_username
+      GITEA_TOKEN:
+        from_secret: gitea_git_token
     commands:
       - apk add --no-cache git sed
+      - test -n "$GITEA_USERNAME"
+      - test -n "$GITEA_TOKEN"
+      - 'printf "machine gitea.mnky-code.de\nlogin %s\npassword %s\n" "$GITEA_USERNAME" "$GITEA_TOKEN" > ~/.netrc'
+      - chmod 600 ~/.netrc
       - git clone https://gitea.mnky-code.de/mnky/k8s-manifests.git
       - cd k8s-manifests
       - 'sed -i "s|image: gitea.mnky-code.de/mnky/ngrx-playground:.*|image: gitea.mnky-code.de/mnky/ngrx-playground:${DRONE_COMMIT_SHA}|" ngrx-playground/deployment.yaml'
@@ -59,4 +63,4 @@ steps:
       - git config user.email "drone@mnky-code.de"
       - git add ngrx-playground/deployment.yaml
       - 'git commit -m "Deploy ngrx-playground ${DRONE_COMMIT_SHA}" || exit 0'
-      - 'git push https://${GITEA_USERNAME}:${GITEA_PASSWORD}@gitea.mnky-code.de/mnky/k8s-manifests.git HEAD:main'
+      - git push origin HEAD:main

Dockerfile

@@ -9,5 +9,6 @@ RUN npm run build
 # Runtime Stage
 FROM nginx:alpine
 COPY --from=builder /app/dist/*/browser /usr/share/nginx/html
+COPY nginx.conf /etc/nginx/conf.d/default.conf
 EXPOSE 80
-CMD ["nginx", "-g", "daemon off;"]
+CMD ["nginx", "-g", "daemon off;"]

nginx.conf

@@ -0,0 +1,11 @@
+server {
+  listen 80;
+  server_name _;
+
+  root /usr/share/nginx/html;
+  index index.html;
+
+  location / {
+    try_files $uri $uri/ /index.html;
+  }
+}