Cybersecurity-Projects/PROJECTS/advanced/ai-threat-detection/infra/docker/fastapi.prod

50 lines
1.2 KiB
Plaintext

# ©AngelaMos | 2026
# Production FastAPI Dockerfile
# Multi-stage build, single uvicorn worker (pipeline runs in-process)
FROM python:3.14-slim AS builder
ENV PYTHONUNBUFFERED=1 \
PYTHONDONTWRITEBYTECODE=1
WORKDIR /app
COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
RUN apt-get update && \
apt-get install -y --no-install-recommends \
build-essential \
libpq-dev && \
rm -rf /var/lib/apt/lists/*
COPY backend/pyproject.toml ./
RUN uv pip install --target /app/deps .
FROM python:3.14-slim
WORKDIR /app
RUN apt-get update && \
apt-get install -y --no-install-recommends \
libpq5 \
curl && \
rm -rf /var/lib/apt/lists/* && \
useradd -m -u 1000 appuser
COPY --from=builder /app/deps /home/appuser/.local/lib/python3.14/site-packages
ENV PYTHONPATH=/home/appuser/.local/lib/python3.14/site-packages:$PYTHONPATH \
PATH=/home/appuser/.local/lib/python3.14/site-packages/bin:$PATH
COPY backend/ .
RUN mkdir -p /app/data/models && \
chown -R appuser:appuser /app
USER appuser
EXPOSE 8000
HEALTHCHECK --interval=30s --timeout=10s --start-period=40s --retries=3 \
CMD curl -f http://localhost:8000/health || exit 1
CMD ["uvicorn", "app.factory:create_app", "--factory", "--host", "0.0.0.0", "--port", "8000"]