Dockerfile

# =====================
# BASE IMAGE
# =====================

FROM python:3.13-slim-bullseye AS base

COPY --chmod=0644 <<"EOF" /etc/apt/apt.conf
APT::Get::Assume-Yes "true";
APT::Install-Recommends "0";
APT::Install-Suggests "0";
APT::Sandbox::User "root";
EOF

ENV PYTHONFAULTHANDLER=1 \
    PYTHONHASHSEED=random \
    PYTHONUNBUFFERED=1 \
    PYTHONDONTWRITEBYTECODE=1 \
    PIP_DEFAULT_TIMEOUT=100 \
    PIP_DISABLE_PIP_VERSION_CHECK=1 \
    PIP_NO_CACHE_DIR=1 \
    PIP_ROOT_USER_ACTION=ignore \
    WORKDIR_PATH="/tekst"


# =====================
# BUILDER
# =====================

FROM base AS builder
SHELL ["/bin/bash", "-o", "pipefail", "-c"]
COPY --from=ghcr.io/astral-sh/uv:0.6.4 /uv /uvx /bin/

WORKDIR "$WORKDIR_PATH"
COPY ./uv.lock* ./pyproject.toml README.md LICENSE ./
COPY tekst/ tekst/

RUN uv run pip install --upgrade \
        pip \
        setuptools \
        wheel

# export dependencies as requirements.txt
RUN uv export \
        --locked \
        --no-group dev \
        --no-hashes \
        --no-progress \
        --format requirements-txt \
        --output-file requirements.txt

# build wheels for dependencies
RUN uv run pip wheel \
        --requirement requirements.txt \
        --wheel-dir deps

# build tekst wheel
RUN uv build --wheel


# ==============
# PROD APP IMAGE
# ==============

FROM base AS prod

ENV FASTAPI_ENV=production

# install needed OS packages
RUN apt-get update && \
    apt-get install curl && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/*

WORKDIR "$WORKDIR_PATH"

# copy app and dependencies
COPY --from=builder "$WORKDIR_PATH"/deps/ deps/
COPY --from=builder "$WORKDIR_PATH"/dist/ dist/

# install app and dependencies
RUN python3 -m pip install \
        --no-index \
        --find-links deps \
        dist/*.whl

# cleanup
RUN rm -rf dist deps

# install uvicorn ASGI workers and gunicorn WSGI server
RUN python3 -m pip install \
        "uvicorn[standard]==0.32.0" \
        "gunicorn==23.0.0"

HEALTHCHECK \
    --interval=2m \
    --timeout=5s \
    --retries=3 \
    --start-period=30s \
    CMD curl http://localhost:8000/status || exit 1

RUN groupadd -g 1000 tekst && \
    useradd -m -u 1000 -g tekst tekst

COPY ./entrypoint.sh /

USER tekst

VOLUME /etc/gunicorn/
EXPOSE 8000

ENTRYPOINT ["/entrypoint.sh"]