Dockerfile

# ======================= BASE IMAGE ======================================================
FROM alpine:3.19 as builder

ENV PYTHONUNBUFFERED True

RUN apk add --no-cache \
      python3 postgresql-libs icu-libs libpq \
      py3-pip py3-wheel libffi \
      gettext mailcap \
    && apk add --no-cache --virtual .build-deps \
                build-base \
                python3-dev \
                postgresql-dev \
                linux-headers libffi-dev
COPY poetry.lock pyproject.toml ./

RUN pip install --break-system-packages poetry poetry-plugin-export \
    && poetry export --without dev --without-hashes -o requirements.txt \
    && poetry export --only dev --without-hashes -o requirements-dev.txt


# ======================== APP IMAGE =======================================================
FROM alpine:3.19 as main

ENV PYTHONUNBUFFERED True

ENV APP_HOME /app

ENV USER web-user

RUN addgroup -S $USER -g 1000 && adduser -S $USER -G $USER -u 1000

WORKDIR $APP_HOME

COPY --from=builder --chown=$USER requirements.txt $APP_HOME/

RUN apk add --no-cache \
                python3 \
                postgresql-libs icu-libs libpq \
                py3-pip \
                py3-wheel \
                gettext \
                mailcap libffi \
    && apk add --no-cache --virtual .build-deps \
                build-base \
                python3-dev \
                postgresql-dev \
                linux-headers libffi-dev \
    && pip install --break-system-packages --no-cache-dir -r requirements.txt \
    && apk del .build-deps \
    && rm -rf /root/.cache/ \
    && chown -R $USER:$USER $APP_HOME

COPY --chown=$USER . $APP_HOME/

USER $USER

RUN python3 manage.py compilemessages -i venv \
    && python3 manage.py collectstatic --no-input

EXPOSE 8000

STOPSIGNAL SIGINT

CMD exec uwsgi --ini uwsgi.ini