79 lines
2.5 KiB
Docker
79 lines
2.5 KiB
Docker
# ─────────────────────────────────────────────
|
|
# QRknit — Dockerfile
|
|
# Multi-stage build for a lean production image
|
|
# ─────────────────────────────────────────────
|
|
|
|
# ── Stage 1: Build deps ───────────────────────
|
|
FROM python:3.12-slim AS builder
|
|
|
|
WORKDIR /build
|
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
gcc \
|
|
libjpeg-dev \
|
|
zlib1g-dev \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
COPY requirements.txt .
|
|
RUN pip install --upgrade pip && \
|
|
pip install --prefix=/install --no-cache-dir -r requirements.txt
|
|
|
|
|
|
# ── Stage 2: Runtime image ────────────────────
|
|
FROM python:3.12-slim AS runtime
|
|
|
|
LABEL maintainer="QRknit"
|
|
LABEL description="Self-hosted URL shortener and QR code generator"
|
|
LABEL version="1.0"
|
|
|
|
# Runtime system deps (Pillow needs libjpeg)
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
libjpeg62-turbo \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Create non-root user
|
|
RUN groupadd -r qrknit && useradd -r -g qrknit -d /app -s /sbin/nologin qrknit
|
|
|
|
WORKDIR /app
|
|
|
|
# Copy installed Python packages from builder
|
|
COPY --from=builder /install /usr/local
|
|
|
|
# Copy application files
|
|
COPY --chown=qrknit:qrknit app.py .
|
|
COPY --chown=qrknit:qrknit index.html .
|
|
COPY --chown=qrknit:qrknit landing.html .
|
|
COPY --chown=qrknit:qrknit landing-os.html .
|
|
COPY --chown=qrknit:qrknit api-docs.html .
|
|
COPY --chown=qrknit:qrknit static/ ./static/
|
|
|
|
# Data volume — SQLite DB lives here
|
|
# Map to host path in Unraid: /mnt/user/appdata/qrknit → /app/data
|
|
VOLUME ["/app/data"]
|
|
|
|
EXPOSE 5000
|
|
|
|
# Health check — waits 15s for startup before first check
|
|
# Uses /api/health (public, no auth required)
|
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=15s --retries=3 \
|
|
CMD python3 -c "import urllib.request; urllib.request.urlopen('http://localhost:5000/api/health')" || exit 1
|
|
|
|
USER qrknit
|
|
|
|
# Non-sensitive defaults only — SECRET_KEY and ADMIN_PASSWORD must be passed at runtime
|
|
ENV BASE_URL=http://localhost:5000 \
|
|
APP_NAME=to.ALWISP \
|
|
ADMIN_USERNAME=admin \
|
|
PORT=5000 \
|
|
DEBUG=false \
|
|
DB_PATH=/app/data/qrknit.db
|
|
|
|
# Start with Gunicorn
|
|
CMD ["python3", "-m", "gunicorn", \
|
|
"--workers", "1", \
|
|
"--bind", "0.0.0.0:5000", \
|
|
"--timeout", "60", \
|
|
"--access-logfile", "-", \
|
|
"--error-logfile", "-", \
|
|
"app:app"]
|