init
This commit is contained in:
36
Dockerfile
Normal file
36
Dockerfile
Normal file
@@ -0,0 +1,36 @@
|
||||
# ── Stage 1: builder ─────────────────────────────────────────────────────────
|
||||
FROM python:3.12-slim AS builder
|
||||
|
||||
WORKDIR /build
|
||||
|
||||
COPY requirements.txt .
|
||||
|
||||
# Kompajliraj dependencies u wheel fajlove
|
||||
RUN pip install --upgrade pip && \
|
||||
pip wheel --no-cache-dir --wheel-dir /wheels -r requirements.txt
|
||||
|
||||
# ── Stage 2: production ───────────────────────────────────────────────────────
|
||||
FROM python:3.12-slim
|
||||
|
||||
# Ne koristiti root
|
||||
RUN adduser --disabled-password --gecos "" appuser
|
||||
|
||||
WORKDIR /app
|
||||
|
||||
# Kopiraj samo wheel fajlove iz buildera
|
||||
COPY --from=builder /wheels /wheels
|
||||
RUN pip install --no-cache-dir --no-index --find-links=/wheels /wheels/* && \
|
||||
rm -rf /wheels
|
||||
|
||||
# Kopiraj aplikaciju
|
||||
COPY app/ ./app/
|
||||
|
||||
# Prebaci na non-root korisnika
|
||||
USER appuser
|
||||
|
||||
EXPOSE 8000
|
||||
|
||||
HEALTHCHECK --interval=15s --timeout=5s --start-period=30s --retries=3 \
|
||||
CMD python -c "import urllib.request; urllib.request.urlopen('http://localhost:8000/health')"
|
||||
|
||||
CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"]
|
||||
Reference in New Issue
Block a user