first

Dockerfile

@@ -0,0 +1,46 @@
+# syntax=docker/dockerfile:1.7
+FROM python:3.11-slim AS builder
+
+ENV PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1 \
+    PIP_DISABLE_PIP_VERSION_CHECK=1 \
+    PIP_INDEX_URL=https://package-mirror.liara.ir/repository/pypi/simple
+WORKDIR /app
+
+# Liara mirrors Debian and PyPI traffic inside Iran. The Debian mirror is a
+# build argument so it can be replaced without editing the image recipe.
+ARG DEBIAN_MIRROR_HOST=linux-mirror.liara.ir/repository
+RUN sed -i "s|deb.debian.org|${DEBIAN_MIRROR_HOST}|g" /etc/apt/sources.list /etc/apt/sources.list.d/*.sources 2>/dev/null || true
+RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
+    --mount=type=cache,target=/var/lib/apt,sharing=locked \
+    apt-get update && apt-get install -y --no-install-recommends build-essential libpq-dev && \
+    rm -rf /var/lib/apt/lists/*
+RUN python -m venv /opt/venv
+ENV PATH="/opt/venv/bin:$PATH"
+COPY requirements.txt .
+RUN --mount=type=cache,target=/root/.cache/pip \
+    pip install --default-timeout=1000 -r requirements.txt
+
+FROM python:3.11-slim AS runtime
+
+ENV PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1 \
+    PATH="/opt/venv/bin:$PATH"
+WORKDIR /app
+
+RUN useradd --create-home --uid 1000 django
+ARG DEBIAN_MIRROR_HOST=linux-mirror.liara.ir/repository
+RUN sed -i "s|deb.debian.org|${DEBIAN_MIRROR_HOST}|g" /etc/apt/sources.list /etc/apt/sources.list.d/*.sources 2>/dev/null || true
+RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
+    --mount=type=cache,target=/var/lib/apt,sharing=locked \
+    apt-get update && apt-get install -y --no-install-recommends libmagic1 libpq5 && \
+    rm -rf /var/lib/apt/lists/* && \
+    mkdir -p /app/staticfiles /app/media && chown -R django:django /app
+
+COPY --from=builder --chown=django:django /opt/venv /opt/venv
+COPY --chown=django:django . .
+RUN chmod +x /app/docker/entrypoint.sh
+USER django
+EXPOSE 8000
+ENTRYPOINT ["/app/docker/entrypoint.sh"]
+CMD ["gunicorn", "config.wsgi:application", "--bind", "0.0.0.0:8000", "--workers", "3", "--timeout", "60", "--graceful-timeout", "30", "--access-logfile", "-", "--error-logfile", "-"]