elpatron
58b9e0bb0a
Remove path-based import, add rate limits and upload caps, security headers, proxy trust, bundled Chart.js, non-root Docker, and NPM deployment docs. Co-authored-by: Cursor <cursoragent@cursor.com>
30 lines
743 B
Docker
30 lines
743 B
Docker
FROM python:3.12-slim
|
|
|
|
WORKDIR /app
|
|
|
|
ENV PYTHONDONTWRITEBYTECODE=1 \
|
|
PYTHONUNBUFFERED=1 \
|
|
DATA_DIR=/data \
|
|
TRUST_PROXY=1 \
|
|
DISABLE_LOCAL_VIEWER=1 \
|
|
PREFERRED_URL_SCHEME=https \
|
|
MAX_UPLOAD_MB=10
|
|
|
|
COPY requirements.txt .
|
|
RUN pip install --no-cache-dir -r requirements.txt
|
|
|
|
COPY app.py db.py parser.py categories.py validation.py viewers.py security.py ./
|
|
COPY templates/ templates/
|
|
COPY static/ static/
|
|
|
|
RUN mkdir -p /data/viewers /data/uploads \
|
|
&& useradd --create-home --uid 1000 --shell /usr/sbin/nologin appuser \
|
|
&& chown -R appuser:appuser /app /data
|
|
|
|
USER appuser
|
|
|
|
VOLUME ["/data"]
|
|
EXPOSE 5000
|
|
|
|
CMD ["gunicorn", "--bind", "0.0.0.0:5000", "--workers", "2", "--threads", "4", "--timeout", "120", "app:app"]
|