53 lines
1.3 KiB
Docker
53 lines
1.3 KiB
Docker
# Stage 1: Build
|
|
FROM python:3.12-slim AS builder
|
|
|
|
WORKDIR /app
|
|
|
|
# Install build dependencies
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
gcc \
|
|
libpq-dev \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Install Python dependencies
|
|
COPY requirements.txt .
|
|
RUN pip wheel --no-cache-dir --no-deps --wheel-dir /app/wheels -r requirements.txt
|
|
|
|
# Stage 2: Runtime
|
|
FROM python:3.12-slim AS runtime
|
|
|
|
WORKDIR /app
|
|
|
|
# Install runtime dependencies
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
libpq5 \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Create non-root user
|
|
RUN addgroup --system --gid 1001 appgroup && \
|
|
adduser --system --uid 1001 --ingroup appgroup appuser
|
|
|
|
# Install wheels
|
|
COPY --from=builder /app/wheels /wheels
|
|
RUN pip install --no-cache /wheels/*
|
|
|
|
# Copy application code
|
|
COPY --chown=appuser:appgroup app/ ./app/
|
|
COPY --chown=appuser:appgroup alembic/ ./alembic/
|
|
COPY --chown=appuser:appgroup alembic.ini ./
|
|
|
|
# Copy Infisical entrypoint
|
|
COPY --chown=appuser:appgroup entrypoint.sh ./entrypoint.sh
|
|
RUN chmod +x /app/entrypoint.sh
|
|
|
|
# Create directories for mounted volumes
|
|
RUN mkdir -p /app/designs /app/config && \
|
|
chown -R appuser:appgroup /app
|
|
|
|
USER appuser
|
|
|
|
EXPOSE 8000
|
|
|
|
ENTRYPOINT ["/app/entrypoint.sh"]
|
|
CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"]
|