Dockerfile.python

# =============================================================================
# UDC Enterprise Platform — Python Services Multi-Stage Dockerfile
# =============================================================================
# Usage: docker build -f Dockerfile.python --build-arg SERVICE=udc_metacatalog .
# =============================================================================

FROM python:3.11-slim AS base

# Install system dependencies
RUN apt-get update && apt-get install -y --no-install-recommends \
    curl \
    build-essential \
    libpq-dev \
    && rm -rf /var/lib/apt/lists/*

# Install uv
COPY --from=ghcr.io/astral-sh/uv:latest /uv /usr/local/bin/uv

# Set working directory
WORKDIR /app

# --- Builder stage ---
FROM base AS builder

ARG SERVICE

# Copy the specific service and shared config
COPY src/${SERVICE}/pyproject.toml ./pyproject.toml
RUN uv pip install --system --no-cache -r pyproject.toml || true

# Copy source code
COPY src/${SERVICE}/ ./
COPY shared/ /app/shared/

# --- Runtime stage ---
FROM python:3.11-slim AS runtime

RUN apt-get update && apt-get install -y --no-install-recommends \
    curl \
    libpq5 \
    && rm -rf /var/lib/apt/lists/*

# Install uv for runtime
COPY --from=ghcr.io/astral-sh/uv:latest /uv /usr/local/bin/uv

# Create non-root user
RUN groupadd -r udc && useradd -r -g udc -d /app -s /sbin/nologin udc

WORKDIR /app

# Copy installed packages and source from builder
COPY --from=builder /usr/local/lib/python3.11/site-packages /usr/local/lib/python3.11/site-packages
COPY --from=builder /usr/local/bin /usr/local/bin
COPY --from=builder /app /app

# Set ownership
RUN chown -R udc:udc /app

USER udc

# Default environment
ENV PYTHONUNBUFFERED=1 \
    PYTHONDONTWRITEBYTECODE=1 \
    LOG_LEVEL=INFO

# Health check
HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
    CMD curl -f http://localhost:${PORT:-8000}/health || exit 1

# Default command (override per service in docker-compose)
CMD ["uvicorn", "api.app:app", "--host", "0.0.0.0", "--port", "8000"]