feat: update Dockerfile, use common uwsgi config

- Make Dockerfile more in line with other projects' Dockerfiles
- Use City of Helsinki common uwsgi configurations

Refs: RATYK-199

Author: danipran

.docker/Dockerfile

@@ -2,55 +2,77 @@
 FROM registry.access.redhat.com/ubi9/python-312 AS appbase
 # ==============================
 
+# Branch or tag used to pull python-uwsgi-common.
+ARG UWSGI_COMMON_REF="main"
+
 USER root
 WORKDIR /app
 
 ENV PYTHONDONTWRITEBYTECODE 1
 ENV PYTHONUNBUFFERED 1
 
-COPY --chown=default:root requirements*.txt .
+COPY requirements.txt .
+COPY requirements-prod.txt .
 
-RUN dnf update -y && dnf install -y \
+RUN dnf update -y \
+    && dnf install -y \
     nmap-ncat \
     gettext \
     && pip install -U pip setuptools wheel \
     && pip install --no-cache-dir -r requirements.txt \
     && pip install --no-cache-dir -r requirements-prod.txt \
-    && mkdir -p /usr/local/lib/uwsgi/plugins \
-    && uwsgi --build-plugin https://github.com/City-of-Helsinki/uwsgi-sentry \
-    && mv sentry_plugin.so /usr/local/lib/uwsgi/plugins/ \
     && dnf clean all
 
+# Build and copy specific python-uwsgi-common files.
+ADD https://github.com/City-of-Helsinki/python-uwsgi-common/archive/"${UWSGI_COMMON_REF}".tar.gz /usr/src/
+RUN mkdir -p /usr/src/python-uwsgi-common \
+    && tar --strip-components=1 -xzf /usr/src/"${UWSGI_COMMON_REF}".tar.gz -C /usr/src/python-uwsgi-common \
+    && mkdir /etc/uwsgi \
+    && cp /usr/src/python-uwsgi-common/uwsgi-base.ini /etc/uwsgi/ \
+    && uwsgi --build-plugin /usr/src/python-uwsgi-common \
+    && rm -rf /usr/src/"${UWSGI_COMMON_REF}".tar.gz \
+    && rm -rf /usr/src/python-uwsgi-common \
+    && uwsgi --build-plugin https://github.com/City-of-Helsinki/uwsgi-sentry \
+    && mkdir -p /usr/local/lib/uwsgi/plugins \
+    && mv sentry_plugin.so /usr/local/lib/uwsgi/plugins
+
 ENTRYPOINT ["/app/.docker/docker-entrypoint.sh"]
-EXPOSE 8000/tcp
 
 # ==============================
 FROM appbase AS development
 # ==============================
-
-COPY --chown=default:root requirements-dev.txt .
+COPY requirements-dev.txt .
 RUN pip install --no-cache-dir -r requirements-dev.txt
 
 ENV DEV_SERVER=True
+ENV PIP_TOOLS_CACHE_DIR="/tmp/pip-tools-cache"
 
-COPY --chown=default:root . .
+RUN groupadd -g 1000 appuser \
+    && useradd -u 1000 -g appuser -ms /bin/bash appuser \
+    && chown -R appuser:root /app
 
-USER root
+COPY --chown=appuser:root . .
+
+USER appuser
+EXPOSE 8000/tcp
 
 # ==============================
 FROM appbase AS staticbuilder
 # ==============================
 
-ENV STATIC_ROOT=/app/static
-COPY --chown=default:root . .
-RUN SECRET_KEY="only-used-for-collectstatic" ENABLE_ADMIN_APP="True"  \
+ENV STATIC_ROOT="/app/static"
+COPY . .
+
+RUN mkdir -p tirehtoori/static \
+    && SECRET_KEY="only-used-for-collectstatic" ENABLE_ADMIN_APP="True" \
     python manage.py collectstatic --noinput
 
 # ==============================
 FROM appbase AS production
 # ==============================
 
-COPY --from=staticbuilder --chown=default:root /app/static /app/static
-COPY --chown=default:root . .
+COPY --from=staticbuilder /app/static /app/static
+COPY . .
 
 USER default
+EXPOSE 8000/tcp

.docker/uwsgi.ini

@@ -1,5 +1,9 @@
 [uwsgi]
 # https://uwsgi-docs.readthedocs.io/en/latest/Options.html
+strict = true  # Fail if any option is unknown
+
+# Use base ini file to configure common settings
+include = /etc/uwsgi/uwsgi-base.ini
 
 http = :8000
 http-timeout = 60