c33b20db1f
Produces a python:3.12-slim-bookworm image that runs migrations (with the pre-upgrade backup hook) then uvicorn under uid/gid 1000:1000, as required by the /mnt/quartermaster/ bind mount on the deploy host. HEALTHCHECK hits /healthz; uvicorn is pointed at logconfig.json so access logs land on stdout as JSON. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
34 lines
939 B
Docker
34 lines
939 B
Docker
# syntax=docker/dockerfile:1.7
|
|
FROM python:3.12-slim-bookworm
|
|
|
|
COPY --from=ghcr.io/astral-sh/uv:0.5.11 /uv /uvx /usr/local/bin/
|
|
|
|
ENV UV_LINK_MODE=copy \
|
|
UV_COMPILE_BYTECODE=1 \
|
|
UV_PROJECT_ENVIRONMENT=/app/.venv \
|
|
PYTHONUNBUFFERED=1 \
|
|
PATH="/app/.venv/bin:$PATH"
|
|
|
|
WORKDIR /app
|
|
|
|
COPY pyproject.toml uv.lock ./
|
|
RUN uv sync --no-dev --frozen --no-install-project
|
|
|
|
COPY src ./src
|
|
COPY alembic ./alembic
|
|
COPY alembic.ini ./
|
|
COPY scripts ./scripts
|
|
COPY README.md ./
|
|
COPY docker/entrypoint.sh /usr/local/bin/entrypoint.sh
|
|
|
|
RUN uv sync --no-dev --frozen \
|
|
&& chmod +x /usr/local/bin/entrypoint.sh \
|
|
&& chown -R 1000:1000 /app
|
|
|
|
USER 1000:1000
|
|
EXPOSE 8000
|
|
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
|
|
CMD python -c "import sys, urllib.request; sys.exit(0 if urllib.request.urlopen('http://127.0.0.1:8000/healthz', timeout=3).status == 200 else 1)"
|
|
|
|
ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
|