Automated Template Builds, Proxmox User ACLs, Improved LDAP Integration

.github/workflows/build-images.yml

@@ -0,0 +1,76 @@
+name: Build and Push Images
+
+on:
+  push:
+    branches:
+      - '**'
+    tags:
+      - '**'
+    paths:
+      - 'images/**'
+  schedule:
+    # Run weekly on Sunday at 11:00 PM UTC (Sunday-Monday night depending on timezone)
+    - cron: '0 23 * * 0'
+  workflow_dispatch:
+
+env:
+  REGISTRY: ghcr.io
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Docker Meta (Base)
+        id: meta-base
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ github.repository }}/base
+          bake-target: base
+          tags: |
+            type=sha
+            type=ref,event=branch
+            type=ref,event=tag
+            type=raw,value=latest,enable=${{ github.ref == 'refs/heads/main' }}
+
+      - name: Docker Meta (NodeJS)
+        id: meta-nodejs
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ github.repository }}/nodejs
+          bake-target: nodejs
+          tags: |
+            type=sha
+            type=ref,event=branch
+            type=ref,event=tag
+            type=raw,value=latest,enable=${{ github.ref == 'refs/heads/main' }}
+
+      - name: Build and push
+        uses: docker/bake-action@v5
+        with:
+          workdir: ./images
+          push: true
+          files: |
+            ./docker-bake.hcl
+            ${{ steps.meta-base.outputs.bake-file }}
+            ${{ steps.meta-nodejs.outputs.bake-file }}
+          set: |
+            base.cache-from=type=gha,scope=base-${{ github.ref_name }}
+            base.cache-to=type=gha,mode=max,scope=base-${{ github.ref_name }}
+            nodejs.cache-from=type=gha,scope=nodejs-${{ github.ref_name }}
+            nodejs.cache-to=type=gha,mode=max,scope=nodejs-${{ github.ref_name }}