28 lines
832 B
Docker
28 lines
832 B
Docker
|
FROM python:3.12-slim
|
||
|
|
|
||
|
|
# Install system dependencies
|
||
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
||
|
|
curl \
|
||
|
|
&& rm -rf /var/lib/apt/lists/*
|
||
|
|
|
||
|
|
# Create non-root user
|
||
|
|
RUN useradd -m -r -s /bin/bash appuser
|
||
|
|
|
||
|
|
# Create necessary directories
|
||
|
|
WORKDIR /app
|
||
|
|
RUN mkdir -p /app/uploads /app/thumbnails
|
||
|
|
RUN chown -R appuser:appuser /app
|
||
|
|
|
||
|
|
# Install Python dependencies
|
||
|
|
COPY requirements.txt .
|
||
|
|
RUN pip install --no-cache-dir -r requirements.txt gunicorn
|
||
|
|
|
||
|
|
# Copy application files
|
||
|
|
COPY --chown=appuser:appuser templates /app/templates
|
||
|
|
COPY --chown=appuser:appuser app.py config.py models.py steganography.py ./
|
||
|
|
|
||
|
|
# Switch to non-root user
|
||
|
|
USER appuser
|
||
|
|
|
||
|
|
# Use gunicorn for production
|
||
|
|
CMD ["gunicorn", "--bind", "0.0.0.0:5000", "--workers", "4", "--timeout", "120", "--access-logfile", "-", "--error-logfile", "-", "app:app"]
|