Dockerfile

###########
# BUILDER #
###########

# pull official base image
FROM python:3.13-slim-bookworm AS builder

# install uv
COPY --from=ghcr.io/astral-sh/uv:0.11.19 /uv /uvx /bin/

# set work directory
WORKDIR /usr/src/app

# set environment variables
ENV PYTHONDONTWRITEBYTECODE=1
ENV PYTHONUNBUFFERED=1
ENV UV_COMPILE_BYTECODE=1
ENV UV_LINK_MODE=copy

# install python dependencies into a virtual environment (.venv)
COPY pyproject.toml uv.lock ./
RUN uv sync --locked --no-dev --no-install-project


#########
# FINAL #
#########

# pull official base image
FROM python:3.13-slim-bookworm

# upgrade system packages
RUN apt-get update && apt-get upgrade -y && apt-get clean

# create directory for the app user
RUN mkdir -p /home/app

# create the app user
RUN addgroup --system app && adduser --system --group app

# create the appropriate directories
ENV HOME=/home/app
ENV APP_HOME=/home/app/web
RUN mkdir $APP_HOME

WORKDIR $APP_HOME

# set environment variables
ENV PYTHONDONTWRITEBYTECODE=1
ENV PYTHONUNBUFFERED=1
ENV ENVIRONMENT=prod
ENV TESTING=0
ENV PYTHONPATH=$APP_HOME
# activate the virtual environment by adding it to the PATH
ENV PATH="/usr/src/app/.venv/bin:$PATH"

# copy the pre-built virtual environment from the builder
COPY --from=builder /usr/src/app/.venv /usr/src/app/.venv

# copy project
COPY . $APP_HOME

# collect static files
RUN python manage.py collectstatic --noinput

# chown all the files to the app user
RUN chown -R app:app $HOME

# change to the app user
USER app

# perform the migrations, create a superuser, and serve the application
CMD ./start_app.sh