Dockerfile

FROM python:3.12-bookworm AS builder

RUN apt-get update \
  && apt-get upgrade -y \
  && apt-get install -y build-essential libpq-dev gettext curl \
  && apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false \
  && rm -rf /var/lib/apt/lists/*

# Install Rust for building dependencies
ENV PATH="/root/.cargo/bin:${PATH}"
RUN curl https://sh.rustup.rs -sSf | sh -s -- -y

WORKDIR /build

COPY requirements.txt /build/
RUN pip install uv
RUN uv pip install --system --target /build/deps -r requirements.txt

# ---- Runtime stage ----
FROM python:3.12-slim-trixie

RUN apt-get update \
  && apt-get upgrade -y \
  && apt-get install -y --no-install-recommends \
  libpq5 \
  nginx \
  procps \
  curl \
  # Install kubectl
  && ARCH=$(dpkg --print-architecture) \
  && curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/${ARCH}/kubectl" \
  && install -o root -g root -m 0755 kubectl /usr/local/bin/kubectl \
  && rm kubectl \
  # Install Otterize CLI (optional - skip if download fails)
  && (curl -LJO https://get.otterize.com/otterize-cli/v2.0.3/otterize_linux_x86_64.tar.gz && \
  file otterize_linux_x86_64.tar.gz | grep -q "gzip compressed" && \
  tar xf otterize_linux_x86_64.tar.gz && \
  install -o root -g root -m 0755 otterize /usr/local/bin/otterize && \
  rm otterize_linux_x86_64.tar.gz) || echo "Otterize CLI installation skipped" \
  # Clean up
  && apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false \
  && rm -rf /var/lib/apt/lists/*

COPY nginx.default /etc/nginx/sites-available/default
RUN ln -sf /dev/stdout /var/log/nginx/access.log \
  && ln -sf /dev/stderr /var/log/nginx/error.log

# Set environment variables
ENV PIP_DISABLE_PIP_VERSION_CHECK=1
ENV PYTHONDONTWRITEBYTECODE=1
ENV PYTHONUNBUFFERED=1
ENV PYTHONPATH="/code/deps:${PYTHONPATH}"
ENV PATH="/code/deps/bin:${PATH}"

# VCS metadata
ARG COMMIT_HASH=unknown
ENV VPC_AGENT_COMMIT_HASH=${COMMIT_HASH}

# Set work directory
WORKDIR /code

# Copy installed dependencies from builder
COPY --from=builder /build/deps /code/deps

# Copy project
COPY . /code
RUN chown -R www-data:www-data /code

COPY scripts/start-celery-worker.sh .
RUN sed -i 's/\r$//g' start-celery-worker.sh
RUN chmod +x start-celery-worker.sh

COPY scripts/start-celery-beat.sh .
RUN sed -i 's/\r$//g' start-celery-beat.sh
RUN chmod +x start-celery-beat.sh


EXPOSE 8080
STOPSIGNAL SIGTERM