# syntax=docker/dockerfile:1.7
# Full Docker image - All features (LLM + Embedding required)
#
# IMPORTANT: Frontend MUST be pre-built before docker build:
# ./scripts/build-frontend.sh
#
# This Dockerfile expects frontend/dist/ to exist
#
# ARCHITECTURE:
# - Builder stage: Install Python dependencies only
# - Final stage: Runtime with git (for repo cloning) + curl (for health checks)
# ============================================
# Builder stage - Install dependencies only
# ============================================
FROM ghcr.io/astral-sh/uv:python3.13-bookworm-slim AS builder
WORKDIR /app
# Copy requirements.txt for optimal layer caching
COPY requirements.txt ./
# Install Python dependencies using uv with BuildKit cache
RUN --mount=type=cache,target=/root/.cache/uv \
uv pip install --system --no-cache -r requirements.txt
# ============================================
# Final stage - Runtime environment
# ============================================
FROM ghcr.io/astral-sh/uv:python3.13-bookworm-slim
ENV PYTHONUNBUFFERED=1 \
PYTHONDONTWRITEBYTECODE=1 \
DEPLOYMENT_MODE=full \
PATH="/app:${PATH}"
# Install ONLY runtime dependencies (git for repo cloning, curl for health checks)
RUN apt-get update && apt-get install -y --no-install-recommends \
git \
curl \
&& rm -rf /var/lib/apt/lists/*
# Create non-root user
RUN useradd -m -u 1000 appuser && \
mkdir -p /app /data /repos && \
chown -R appuser:appuser /app /data /repos
WORKDIR /app
# Copy Python packages from builder
COPY --from=builder /usr/local/lib/python3.13/site-packages /usr/local/lib/python3.13/site-packages
COPY --from=builder /usr/local/bin/uvicorn /usr/local/bin/
# Copy application code (only src/)
COPY --chown=appuser:appuser src ./src
# Copy pre-built frontend static files
COPY --chown=appuser:appuser frontend/dist ./static
USER appuser
# Two-Port Architecture
EXPOSE 8000 8080
# Health check on Web UI port
HEALTHCHECK --interval=30s --timeout=10s --start-period=40s --retries=3 \
CMD curl -f http://localhost:8080/api/v1/health || exit 1
# Start application (dual-port mode)
CMD ["python", "-m", "codebase_rag"]
