Modernize: Node 24, Bolt 4, googleapis/Sentry/cron upgrades + GHCR/Coolify deploy

.dockerignore

@@ -1,7 +1,12 @@
 node_modules/
-.drone.yml
+.git/
+.env
 .env.example
-.eslintrc.json
 .gitignore
 LICENSE
 README.md
+keys/
+eslint.config.js
+scripts/
+test/
+.github/

.github/workflows/ci.yml

@@ -0,0 +1,31 @@
+name: CI
+
+on:
+  push:
+    branches: [master, modernization]
+  pull_request:
+    branches: [master]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 24
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Lint
+        run: npm run lint
+
+      - name: Test
+        run: npm test
+
+      - name: Build Docker image (amd64)
+        run: docker build --platform linux/amd64 -t chorebot:ci .

.gitignore

@@ -61,3 +61,6 @@ typings/
 .next
 
 keys/
+
+# Deploy secrets
+scripts/config.sh

Dockerfile

@@ -1,10 +1,26 @@
-FROM node:12-alpine
+FROM node:24-alpine
 
 WORKDIR /usr/src/app
 
-COPY . /usr/src/app/
-RUN npm install
+ENV NODE_ENV=production
+
+COPY package*.json ./
+RUN npm ci --omit=dev
+
+COPY server.js ./
+COPY utilities/ ./utilities/
 
 EXPOSE 3000
 
-CMD ["npm", "start"]
+# The Google service-account key (keys/sheets-api.json) is NOT baked into the
+# image — mount it at runtime, e.g.:
+#   -v /host/sheets-api.json:/usr/src/app/keys/sheets-api.json:ro
+#
+# NOTE: runs as root so the mounted key is readable regardless of volume
+# ownership (matching prior behavior). Running non-root + moving the key off
+# disk (Workload Identity / injected secret) is a recommended follow-up.
+
+HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
+  CMD wget -qO- http://127.0.0.1:3000/health >/dev/null 2>&1 || exit 1
+
+CMD ["node", "server.js"]

eslint.config.js

@@ -0,0 +1,32 @@
+const js = require("@eslint/js");
+const globals = require("globals");
+
+module.exports = [
+  js.configs.recommended,
+  {
+    files: ["**/*.js"],
+    languageOptions: {
+      ecmaVersion: 2022,
+      sourceType: "commonjs",
+      globals: {
+        ...globals.node,
+      },
+    },
+    rules: {
+      "linebreak-style": ["error", "unix"],
+      quotes: ["error", "double"],
+      semi: ["error", "always"],
+      "no-console": "off",
+      "no-var": "warn",
+      "no-case-declarations": "off",
+    },
+  },
+  {
+    files: ["test/**/*.js"],
+    languageOptions: {
+      globals: {
+        ...globals.jest,
+      },
+    },
+  },
+];