35 lines
1.1 KiB
Docker
35 lines
1.1 KiB
Docker
FROM python:3.11-slim
|
|
|
|
# Create a non-root user for security
|
|
RUN useradd --create-home --shell /bin/bash app
|
|
|
|
# Install gcc compiler for C code compilation and other production dependencies
|
|
RUN apt-get update && \
|
|
apt-get install -y gcc build-essential curl && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
# Set working directory
|
|
WORKDIR /app
|
|
|
|
# Copy requirements and install Python dependencies
|
|
COPY requirements.txt .
|
|
RUN pip install --no-cache-dir -r requirements.txt
|
|
|
|
# Copy backend application code only with non-root ownership
|
|
COPY --chown=app:app app.py config.py extensions.py gunicorn.conf.py alembic.ini pytest.ini ./
|
|
COPY --chown=app:app routes/ ./routes/
|
|
COPY --chown=app:app services/ ./services/
|
|
COPY --chown=app:app scripts/ ./scripts/
|
|
COPY --chown=app:app migrations/ ./migrations/
|
|
COPY --chown=app:app docs/ ./docs/
|
|
COPY --chown=app:app help/ ./help/
|
|
COPY --chown=app:app compiler/ ./compiler/
|
|
|
|
USER app
|
|
|
|
# Expose port 5000
|
|
EXPOSE 5000
|
|
|
|
# Run the application with Gunicorn in production mode using config file
|
|
CMD ["gunicorn", "--config", "gunicorn.conf.py", "app:create_app()"]
|