update structure

Author: Tom Softreck

Dockerfile

@@ -1 +1,72 @@
-# Container support
+# Multi-stage build for TaskProvision
+FROM python:3.11-slim as builder
+
+# Set environment variables
+ENV PYTHONUNBUFFERED=1 \
+    PYTHONDONTWRITEBYTECODE=1 \
+    PIP_NO_CACHE_DIR=1 \
+    PIP_DISABLE_PIP_VERSION_CHECK=1
+
+# Install system dependencies
+RUN apt-get update && apt-get install -y \
+    build-essential \
+    curl \
+    git \
+    && rm -rf /var/lib/apt/lists/*
+
+# Create and switch to app user
+RUN groupadd -r taskprovision && useradd -r -g taskprovision taskprovision
+RUN mkdir -p /app && chown taskprovision:taskprovision /app
+
+# Set work directory
+WORKDIR /app
+
+# Copy requirements first for better caching
+COPY requirements.txt requirements-dev.txt ./
+RUN pip install --no-cache-dir -r requirements.txt
+
+# Production stage
+FROM python:3.11-slim as production
+
+# Set environment variables
+ENV PYTHONUNBUFFERED=1 \
+    PYTHONDONTWRITEBYTECODE=1 \
+    PATH="/app/venv/bin:$PATH" \
+    ENVIRONMENT=production
+
+# Install runtime dependencies
+RUN apt-get update && apt-get install -y \
+    curl \
+    git \
+    && rm -rf /var/lib/apt/lists/*
+
+# Create app user
+RUN groupadd -r taskprovision && useradd -r -g taskprovision taskprovision
+
+# Create directories
+RUN mkdir -p /app /app/logs /app/uploads && \
+    chown -R taskprovision:taskprovision /app
+
+# Copy Python packages from builder
+COPY --from=builder /usr/local/lib/python3.11/site-packages /usr/local/lib/python3.11/site-packages
+COPY --from=builder /usr/local/bin /usr/local/bin
+
+# Switch to app user
+USER taskprovision
+WORKDIR /app
+
+# Copy application code
+COPY --chown=taskprovision:taskprovision . .
+
+# Install TaskProvision in development mode
+RUN pip install -e .
+
+# Expose port
+EXPOSE 8000
+
+# Health check
+HEALTHCHECK --interval=30s --timeout=30s --start-period=5s --retries=3 \
+    CMD curl -f http://localhost:8000/health || exit 1
+
+# Start command
+CMD ["uvicorn", "taskprovision.main:app", "--host", "0.0.0.0", "--port", "8000"]