coulomb-social/Dockerfile
tegwick ac7bac1852
Some checks failed
Use-case regression gate / usecase-regressions (push) Has been cancelled
Prepare persistent personal app release and guarded OIDC repair
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680
2026-10-06 15:14:38 +02:00

50 lines
1.5 KiB
Docker

# syntax=docker/dockerfile:1.7
# coulomb.social — commit-SHA images for the business delivery lane.
#
# docker build -t forgejo.coulomb.social/coulomb/coulomb-social:<git-sha> .
FROM python:3.12-slim-bookworm AS deps
ENV PYTHONDONTWRITEBYTECODE=1 \
PYTHONUNBUFFERED=1 \
UV_LINK_MODE=copy \
UV_PYTHON_DOWNLOADS=never
RUN apt-get update && apt-get install -y --no-install-recommends \
build-essential libpq-dev curl ca-certificates \
&& rm -rf /var/lib/apt/lists/*
COPY --from=ghcr.io/astral-sh/uv:0.5.11 /uv /usr/local/bin/uv
WORKDIR /app
COPY pyproject.toml uv.lock ./
RUN uv sync --frozen --no-dev --no-install-project
FROM python:3.12-slim-bookworm
ENV PYTHONDONTWRITEBYTECODE=1 \
PYTHONUNBUFFERED=1 \
PATH="/app/.venv/bin:$PATH" \
DJANGO_SETTINGS_MODULE=coulomb_social.settings.prod
RUN apt-get update && apt-get install -y --no-install-recommends \
libpq5 ca-certificates \
&& rm -rf /var/lib/apt/lists/* \
&& useradd --create-home --uid 10001 appuser
WORKDIR /app
COPY --from=deps /app/.venv /app/.venv
COPY manage.py pyproject.toml ./
COPY coulomb_social ./coulomb_social
COPY scripts/docker-entrypoint.sh /app/docker-entrypoint.sh
RUN python manage.py collectstatic --noinput \
&& chmod +x /app/docker-entrypoint.sh \
&& chown -R appuser:appuser /app
USER appuser
EXPOSE 8000
HEALTHCHECK --interval=30s --timeout=5s --start-period=20s \
CMD python -c "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8000/healthz')" || exit 1
ENTRYPOINT ["/app/docker-entrypoint.sh"]