mirror of
https://github.com/0xWheatyz/handler.git
synced 2026-08-30 15:26:24 +00:00
0xWheatyz
a0ee204cfc
Multi-stage Dockerfile (python:3.11-slim, non-root, /health healthcheck) with an entrypoint that applies alembic migrations before uvicorn, a compose file pairing the API with Postgres 16, and a CI workflow that builds multi-arch images and pushes branch/semver/sha/latest tags to ghcr.io. PR builds compile the image without pushing.
50 lines
1.6 KiB
Docker
50 lines
1.6 KiB
Docker
# syntax=docker/dockerfile:1
|
|
|
|
# ---- build stage: install the package + deps into an isolated venv ----
|
|
FROM python:3.11-slim AS builder
|
|
|
|
ENV PIP_DISABLE_PIP_VERSION_CHECK=1 \
|
|
PIP_NO_CACHE_DIR=1
|
|
|
|
RUN python -m venv /opt/venv
|
|
ENV PATH="/opt/venv/bin:$PATH"
|
|
|
|
WORKDIR /build
|
|
COPY pyproject.toml README.md ./
|
|
COPY src ./src
|
|
RUN pip install .
|
|
|
|
# ---- runtime stage ----
|
|
FROM python:3.11-slim
|
|
|
|
ENV PATH="/opt/venv/bin:$PATH" \
|
|
PYTHONUNBUFFERED=1 \
|
|
# SQLite fallback lives on the /var/lib/handler volume; point DATABASE_URL at
|
|
# Postgres for real deploys (see .env.example / docker-compose.yml).
|
|
DATABASE_URL="sqlite:////var/lib/handler/handler.db" \
|
|
PROJECTS_ROOT="/var/lib/handler/projects"
|
|
|
|
COPY --from=builder /opt/venv /opt/venv
|
|
|
|
# Alembic runs from /app: alembic.ini resolves script_location=src/handler/migrations
|
|
# relative to the cwd, so the migration tree is shipped alongside the installed package.
|
|
WORKDIR /app
|
|
COPY alembic.ini ./
|
|
COPY src/handler/migrations ./src/handler/migrations
|
|
COPY docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh
|
|
|
|
RUN useradd --system --home-dir /var/lib/handler --create-home handler \
|
|
&& mkdir -p /var/lib/handler/projects \
|
|
&& chown -R handler:handler /var/lib/handler \
|
|
&& chmod +x /usr/local/bin/docker-entrypoint.sh
|
|
|
|
USER handler
|
|
VOLUME /var/lib/handler
|
|
EXPOSE 8000
|
|
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
|
|
CMD python -c "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8000/health', timeout=4)"
|
|
|
|
ENTRYPOINT ["docker-entrypoint.sh"]
|
|
CMD ["uvicorn", "handler.api.app:app", "--host", "0.0.0.0", "--port", "8000"]
|