Cybersecurity-Projects/PROJECTS/encrypted-p2p-chat/conf/docker/prod/fastapi.docker

54 lines
1.3 KiB
Docker

# ©AngelaMos | 2025
# Production FastAPI Dockerfile
# Multi stage build, gunicorn with uvicorn workers
FROM python:3.13-slim AS builder
ENV PYTHONUNBUFFERED=1 \
PYTHONDONTWRITEBYTECODE=1
WORKDIR /app
COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
RUN apt-get update && \
apt-get install -y --no-install-recommends \
build-essential \
libpq-dev && \
rm -rf /var/lib/apt/lists/*
COPY backend/pyproject.toml ./
RUN uv pip install --target /app/deps . gunicorn
FROM python:3.13-slim
WORKDIR /app
RUN apt-get update && \
apt-get install -y --no-install-recommends \
libpq5 \
curl && \
rm -rf /var/lib/apt/lists/* && \
useradd -m -u 1000 appuser
COPY --from=builder /app/deps /home/appuser/.local/lib/python3.13/site-packages
ENV PYTHONPATH=/home/appuser/.local/lib/python3.13/site-packages:$PYTHONPATH \
PATH=/home/appuser/.local/lib/python3.13/site-packages/bin:$PATH
COPY backend/ .
RUN chown -R appuser:appuser /app
USER appuser
EXPOSE 8000
HEALTHCHECK --interval=30s --timeout=10s --start-period=40s --retries=3 \
CMD curl -f http://localhost:8000/health || exit 1
CMD ["gunicorn", "app.main:app", \
"--workers", "4", \
"--worker-class", "uvicorn.workers.UvicornWorker", \
"--bind", "0.0.0.0:8000", \
"--access-logfile", "-", \
"--error-logfile", "-"]