refactor: rework dockerfile to use system python

Author: alukach

Dockerfile

@@ -1,17 +1,25 @@
+# https://github.com/astral-sh/uv-docker-example/blob/c16a61fb3e6ab568ac58d94b73a7d79594a5d570/Dockerfile
 FROM python:3.13-slim
 
-EXPOSE 8000
-
 WORKDIR /app
 
-RUN apt-get update && apt-get install -y gcc libpq-dev
+ENV PATH="/app/.venv/bin:$PATH"
+ENV UV_COMPILE_BYTECODE=1
+ENV UV_LINK_MODE=copy
+ENV UV_PROJECT_ENVIRONMENT=/usr/local
 
 COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
 
-COPY . .
-
-ENV PYTHONUNBUFFERED=1
+# Install the project's dependencies using the lockfile and settings
+RUN --mount=type=cache,target=/root/.cache/uv \
+  --mount=type=bind,source=uv.lock,target=uv.lock \
+  --mount=type=bind,source=pyproject.toml,target=pyproject.toml \
+  uv sync --frozen --no-install-project --no-dev
 
-RUN uv sync --no-dev --locked
+# Then, add the rest of the project source code and install it
+# Installing separately from its dependencies allows optimal layer caching
+ADD . /app
+RUN --mount=type=cache,target=/root/.cache/uv \
+  uv sync --frozen --no-dev
 
-CMD ["uv", "run", "--locked", "--no-dev", "python", "-m", "stac_auth_proxy"]
+CMD ["python", "-m", "stac_auth_proxy"]