Dockerfile

# syntax=docker/dockerfile:1

# Comments are provided throughout this file to help you get started.
# If you need more help, visit the Dockerfile reference guide at
# https://docs.docker.com/engine/reference/builder/

FROM python:3.11.7-alpine3.18 as base

RUN mkdir -p "/etc/config/others"
RUN mkdir -p "/etc/config/secrets"

# Prevents Python from writing pyc files.
ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
    POETRY_VERSION=1.6.1

RUN pip install "poetry==$POETRY_VERSION"

# TODO: parametrize - it should be dev only setup
# responsible for detecting changes on
RUN apk add --update nodejs npm
RUN npm install -g nodemon

WORKDIR /app
COPY poetry.lock pyproject.toml /app/

RUN poetry config virtualenvs.create false \
    && poetry install $(test "$YOUR_ENV" == production && echo "--no-dev") --no-interaction --no-ansi

# Create a non-privileged user that the app will run under.
# See https://docs.docker.com/develop/develop-images/dockerfile_best-practices/#user
ARG UID=10001
RUN adduser \
    --disabled-password \
    --gecos "" \
    --home "/nonexistent" \
    --shell "/sbin/nologin" \
    --no-create-home \
    --uid "${UID}" \
    appuser

# Switch to the non-privileged user to run the application.
USER appuser

# Copy the source code into the container.
COPY . /app

WORKDIR /app

# Expose the port that the application listens on.
EXPOSE $PORT

# Run the application.
# TODO: parametrize - it should be dev only setup
# #TODO: ultimately it should be moved to k8s deployment "command" level
CMD nodemon main.py