mirror of
https://github.com/mruwnik/memory.git
synced 2026-01-02 17:22:58 +01:00
mruwnik
92220f8abc
BUG-057: Remove build dependencies after pip install - Added apt-get purge for gcc, g++, python3-dev - Reduces final image size BUG-044: Make proxy header trust configurable - Added FORWARDED_ALLOW_IPS environment variable - Allows secure configuration for production deployments - Documented recommended settings 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
71 lines
1.8 KiB
Docker
71 lines
1.8 KiB
Docker
# Backend base stage
|
|
FROM python:3.12-slim AS backend-base
|
|
|
|
WORKDIR /app
|
|
|
|
# Install build dependencies
|
|
RUN apt-get update && apt-get install -y \
|
|
gcc \
|
|
g++ \
|
|
python3-dev \
|
|
curl \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Copy and install Python requirements
|
|
COPY requirements ./requirements/
|
|
RUN mkdir src
|
|
COPY setup.py ./
|
|
# Do an initial install to get the dependencies cached
|
|
RUN pip install -e ".[api]"
|
|
|
|
# Frontend build stage
|
|
FROM node:18-alpine AS frontend-builder
|
|
|
|
WORKDIR /frontend
|
|
COPY frontend/package*.json ./
|
|
RUN npm install
|
|
COPY frontend/ ./
|
|
|
|
# Set Vite environment variables for build from build args
|
|
ARG SERVER_URL
|
|
ARG SESSION_COOKIE_NAME
|
|
ENV VITE_SERVER_URL=${SERVER_URL}
|
|
ENV VITE_SESSION_COOKIE_NAME=${SESSION_COOKIE_NAME}
|
|
|
|
RUN npm run build
|
|
|
|
# Final stage
|
|
FROM backend-base
|
|
|
|
# Install the package with Python source code
|
|
COPY src/ ./src/
|
|
RUN pip install -e ".[api]"
|
|
|
|
# Remove build dependencies to reduce image size
|
|
RUN apt-get purge -y gcc g++ python3-dev && \
|
|
apt-get autoremove -y && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
# Copy frontend build output from frontend stage
|
|
COPY --from=frontend-builder /frontend/dist ./static/
|
|
|
|
# Create directories for app
|
|
RUN mkdir -p /app/memory_files
|
|
ENV PYTHONPATH="/app"
|
|
|
|
# Create user and set permissions
|
|
RUN useradd -m kb
|
|
RUN mkdir -p /var/cache/fontconfig /home/kb/.cache/fontconfig && \
|
|
chown -R kb:kb /var/cache/fontconfig /home/kb/.cache/fontconfig /app
|
|
|
|
USER kb
|
|
|
|
# Set environment variables
|
|
ENV PORT=8000
|
|
# FORWARDED_ALLOW_IPS controls which IPs can set X-Forwarded-* headers
|
|
# Set to specific proxy IPs in production (e.g., "10.0.0.1,10.0.0.2")
|
|
# Default "*" is for development/containerized deployments behind trusted proxies
|
|
ENV FORWARDED_ALLOW_IPS="*"
|
|
EXPOSE 8000
|
|
|
|
CMD uvicorn memory.api.app:app --host 0.0.0.0 --port 8000 --proxy-headers --forwarded-allow-ips "$FORWARDED_ALLOW_IPS" |