Dockerfile

# syntax=docker/dockerfile:1
FROM python:3.14-slim AS build
ARG dev
ARG buildver="dev-unknown"
ENV PYTHONDONTWRITEBYTECODE=1
ENV UV_COMPILE_BYTECODE=0
ENV PYTHONUNBUFFERED=1

RUN --mount=type=cache,sharing=locked,target=/var/cache/apt apt-get update \
    && apt-get install -y --no-install-recommends build-essential libpq-dev git

COPY --from=ghcr.io/astral-sh/uv:0.8.8 /uv /uvx /bin/

COPY neodb /neodb
COPY takahe /takahe
COPY misc /misc
COPY pyproject.toml uv.lock /neodb/

RUN echo "${buildver}" > /etc/neodb_version \
 && echo "__version__ = \"${buildver}\"" > /neodb/boofilsic/__init__.py \
 && echo "__version__ = \"${buildver}\"" > /takahe/takahe/neodb.py

# Single venv shared by both the neodb app (/neodb) and the takahe app (/takahe),
# built from the unified pyproject.toml / uv.lock at the repository root.
WORKDIR /neodb
RUN uv venv /neodb-venv
ENV VIRTUAL_ENV=/neodb-venv
RUN find /misc/wheels-cache -type f | xargs -n 1 uv pip install --python /neodb-venv/bin/python || echo incompatible wheel ignored
RUN --mount=type=cache,sharing=locked,target=/root/.cache uv sync --active --no-install-project $(if [ -z "$dev" ]; then echo "--no-dev"; fi)

# runtime stage
FROM python:3.14-slim AS runtime
ENV PYTHONDONTWRITEBYTECODE=1
ENV PYTHONUNBUFFERED=1

RUN --mount=type=cache,sharing=locked,target=/var/cache/apt-run apt-get update \
    && apt-get install -y --no-install-recommends libpq-dev \
    busybox \
    nginx \
    gettext-base \
 && busybox --install \
 && apt-get install -y --no-install-recommends postgresql-client redis-tools gettext \
 && rm -rf /var/lib/apt/lists/* \
 && useradd -m -U app && mkdir -p /www
# postgresql and redis cli are not required, but install for development convenience

COPY --from=build /etc/neodb_version /etc/neodb_version
COPY --from=build /neodb /neodb
COPY --from=build /takahe /takahe
COPY --from=build /neodb-venv /neodb-venv

WORKDIR /neodb
RUN /neodb-venv/bin/django-admin compilemessages \
 && NEODB_SECRET_KEY="t" NEODB_SITE_DOMAIN="x.y" /neodb-venv/bin/python3 manage.py compilescss \
 && NEODB_SECRET_KEY="t" NEODB_SITE_DOMAIN="x.y" /neodb-venv/bin/python3 manage.py collectstatic --noinput

WORKDIR /takahe
RUN TAKAHE_DATABASE_SERVER="postgres://x@y/z" TAKAHE_SECRET_KEY="t" TAKAHE_MAIN_DOMAIN="x.y" /neodb-venv/bin/python3 manage.py collectstatic --noinput

WORKDIR /neodb
COPY misc/bin/* /bin/

# Kept these path for backwards compatibility
COPY misc/bin/nginx-start /neodb/misc/bin/
COPY misc/nginx.conf.d/* /neodb/misc/nginx.conf.d/

USER app:app

CMD [ "neodb-hello"]