| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172 |
- # Build frontend
- FROM node:22-bookworm-slim AS frontend-builder
- WORKDIR /app/frontend
- # Copy package files first for better caching
- COPY frontend/package*.json ./
- # Use cache mount for npm
- RUN --mount=type=cache,target=/root/.npm \
- npm ci
- COPY frontend/ ./
- RUN npm run build
- # Production image
- FROM python:3.13-slim
- WORKDIR /app
- # Install system dependencies
- ENV DEBIAN_FRONTEND=noninteractive
- RUN apt-get update && apt-get install -y --no-install-recommends \
- curl \
- ffmpeg \
- iproute2 \
- libcap2-bin \
- && rm -rf /var/lib/apt/lists/* \
- && mkdir -p /etc/gnutls \
- && printf '[overrides]\ninsecure-hash = SHA1\n[priorities]\nSYSTEM = NORMAL:%%UNSAFE_RENEGOTIATION:%%COMPAT\n' > /etc/gnutls/config
- # Allow binding to privileged ports (e.g. 990/FTPS) as non-root user.
- # File capabilities are more reliable than Docker cap_add with user: directive,
- # which depends on ambient capability support in the container runtime.
- RUN setcap cap_net_bind_service=+ep "$(readlink -f /usr/local/bin/python3)"
- # Install Python dependencies with cache mount
- COPY requirements.txt ./
- RUN --mount=type=cache,target=/root/.cache/pip \
- pip install --root-user-action=ignore -r requirements.txt
- # Copy backend
- COPY backend/ ./backend/
- # Copy built frontend from builder stage
- COPY --from=frontend-builder /app/static ./static
- # Create data directory for persistent storage
- # chmod 777 allows running as non-root user (e.g., with docker compose user: directive)
- RUN mkdir -p /app/data /app/logs && chmod 777 /app/data /app/logs
- # Environment variables
- ENV PYTHONUNBUFFERED=1
- ENV DATA_DIR=/app/data
- ENV LOG_DIR=/app/logs
- ENV PORT=8000
- EXPOSE 3000
- EXPOSE 3002
- EXPOSE 8000
- EXPOSE 8883
- EXPOSE 9990
- EXPOSE 50000-50100
- # Health check (uses PORT env var via shell)
- HEALTHCHECK --interval=30s --timeout=10s --start-period=10s --retries=3 \
- CMD python -c "import urllib.request, os; urllib.request.urlopen(f'http://localhost:{os.environ.get(\"PORT\", \"8000\")}/health')" || exit 1
- # Run the application
- # Use standard asyncio loop (uvloop has permission issues in some Docker environments)
- # Port is configurable via PORT environment variable (default: 8000)
- CMD ["sh", "-c", "uvicorn backend.app.main:app --host 0.0.0.0 --port ${PORT:-8000} --loop asyncio"]
|
