Internal
Public Access
Keith SmithandClaude Sonnet 4.5
e0ee377a20
- Fix import error in notifications/tasks.py (timezone.datetime -> datetime) - Add healthchecks to celery-worker and celery-beat containers - Add procps package to Dockerfile for pgrep command - Add email environment variables to celery containers The import error was causing celery workers to crash when loading tasks. Missing healthchecks prevented proper container health monitoring. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
71 lines
2.1 KiB
Docker
71 lines
2.1 KiB
Docker
# ===================================================================
|
|
# Stage 1: Builder - Install dependencies
|
|
# ===================================================================
|
|
FROM python:3.12-slim-bookworm AS builder
|
|
|
|
# Install build dependencies for PostgreSQL and other packages
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
gcc \
|
|
libpq-dev \
|
|
libjpeg-dev \
|
|
zlib1g-dev \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Upgrade pip to latest version (security) - install to user directory
|
|
RUN pip install --user --upgrade pip
|
|
|
|
# Install Python dependencies
|
|
COPY requirements.txt /tmp/
|
|
RUN pip install --user --no-cache-dir -r /tmp/requirements.txt \
|
|
&& pip install --user --no-cache-dir gunicorn
|
|
|
|
# ===================================================================
|
|
# Stage 2: Runtime - Minimal production image
|
|
# ===================================================================
|
|
FROM python:3.12-slim-bookworm
|
|
|
|
# Install runtime dependencies only
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
postgresql-client \
|
|
curl \
|
|
procps \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Create django user (non-root for security)
|
|
RUN useradd -m -u 1000 -s /bin/bash django
|
|
|
|
# Set working directory
|
|
WORKDIR /app
|
|
|
|
# Copy Python dependencies from builder stage
|
|
COPY --from=builder /root/.local /home/django/.local
|
|
|
|
# Copy application code
|
|
COPY --chown=django:django . /app/
|
|
|
|
# Create directories for media and static files
|
|
RUN mkdir -p /app/media /app/staticfiles && \
|
|
chown -R django:django /app/media /app/staticfiles
|
|
|
|
# Switch to django user
|
|
USER django
|
|
|
|
# Add .local/bin to PATH for installed packages
|
|
ENV PATH=/home/django/.local/bin:$PATH
|
|
|
|
# Set Python to run in unbuffered mode (better for Docker logs)
|
|
ENV PYTHONUNBUFFERED=1
|
|
|
|
# Expose port 8000 for Gunicorn
|
|
EXPOSE 8000
|
|
|
|
# Health check - ping the API endpoint
|
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=40s --retries=3 \
|
|
CMD curl -f http://localhost:8000/api/ || exit 1
|
|
|
|
# Entrypoint script handles migrations, static collection, and service startup
|
|
ENTRYPOINT ["/app/docker/entrypoint.sh"]
|
|
|
|
# Default command is to run Gunicorn
|
|
CMD ["gunicorn"]
|