Dockerfile

FROM python:3.12-slim

# Accept build arguments for git information
ARG GIT_BRANCH=unknown
ARG GIT_COMMIT=unknown
ARG DEPLOYMENT_ENVIRONMENT=production

# Set environment variables from build args
ENV GIT_BRANCH=${GIT_BRANCH}
ENV GIT_COMMIT=${GIT_COMMIT}
ENV DEPLOYMENT_ENVIRONMENT=${DEPLOYMENT_ENVIRONMENT}

# Note: ROLLBAR_ACCESS_TOKEN is injected at runtime by the CodeDeploy
# before_install.sh script, which reads it from deployment-info.json
# (populated by CI from the GitHub repo secret). This avoids exposing
# secrets in the Docker image layers.

# Install build tools and dependencies
RUN apt-get update \
	&& apt-get install -y --no-install-recommends build-essential gcc curl \
	&& rm -rf /var/lib/apt/lists/*

WORKDIR /app

# Install poetry first (also upgrade pip to address CVE-2026-1703)
RUN pip install --no-cache-dir --upgrade pip poetry

# Configure Poetry: Disable virtualenv (install in system site-packages)
RUN poetry config virtualenvs.create false

# Copy dependency files for better layer caching
COPY pyproject.toml ./
COPY poetry.lock ./

# Install dependencies only (without installing the project)
RUN poetry install --no-interaction --no-ansi --no-root

# Copy the rest of the project files
COPY README.md ./
COPY trendsearth_ui ./trendsearth_ui
COPY gunicorn.conf.py ./

# Now install the project itself
RUN poetry install --no-interaction --no-ansi

# Compile translations (generates .mo files from .po files)
RUN pybabel compile -d trendsearth_ui/i18n/translations --use-fuzzy

# Expose port 8000 (gunicorn default)
EXPOSE 8000

# Run the app with gunicorn using config file
CMD ["gunicorn", "--config", "gunicorn.conf.py", "trendsearth_ui.app:server"]