37 lines
1.2 KiB
Docker
37 lines
1.2 KiB
Docker
# ── Stage 1: builder ─────────────────────────────────────────────────────────
|
|
FROM python:3.12-slim AS builder
|
|
|
|
WORKDIR /build
|
|
|
|
COPY requirements.txt .
|
|
|
|
# Kompajliraj dependencies u wheel fajlove
|
|
RUN pip install --upgrade pip && \
|
|
pip wheel --no-cache-dir --wheel-dir /wheels -r requirements.txt
|
|
|
|
# ── Stage 2: production ───────────────────────────────────────────────────────
|
|
FROM python:3.12-slim
|
|
|
|
# Ne koristiti root
|
|
RUN adduser --disabled-password --gecos "" appuser
|
|
|
|
WORKDIR /app
|
|
|
|
# Kopiraj samo wheel fajlove iz buildera
|
|
COPY --from=builder /wheels /wheels
|
|
RUN pip install --no-cache-dir --no-index --find-links=/wheels /wheels/* && \
|
|
rm -rf /wheels
|
|
|
|
# Kopiraj aplikaciju
|
|
COPY app/ ./app/
|
|
|
|
# Prebaci na non-root korisnika
|
|
USER appuser
|
|
|
|
EXPOSE 8000
|
|
|
|
HEALTHCHECK --interval=15s --timeout=5s --start-period=30s --retries=3 \
|
|
CMD python -c "import urllib.request; urllib.request.urlopen('http://localhost:8000/health')"
|
|
|
|
CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"]
|