Dockerfile

# ASPL reference node — minimal container.
FROM python:3.11-slim

# Non-root user for security.
RUN useradd -m -u 1001 -s /bin/bash aspl

WORKDIR /app

# Install dependencies first for better layer caching.
COPY pyproject.toml ./
COPY aspl ./aspl
COPY sdk ./sdk
COPY conformance ./conformance
RUN pip install --no-cache-dir .

# Persist the database, node key and audit log outside the image.
ENV ASPL_DB=/data/aspl.db \
    ASPL_SHOP_KEY=/data/.shop_key \
    ASPL_AUDIT_LOG=/data/audit.jsonl \
    ASPL_HOST=0.0.0.0 \
    ASPL_PORT=5010
RUN mkdir -p /data && chown aspl:aspl /data
VOLUME ["/data"]

EXPOSE 5010

USER aspl

# Lightweight liveness check against the node's root endpoint.
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s \
  CMD python -c "import urllib.request,sys; sys.exit(0 if urllib.request.urlopen('http://127.0.0.1:5010/').status==200 else 1)"

CMD ["aspl-server"]