Files
url_shortening_service/Dockerfile
T
westfarnandCursor eff8c54fe8
CI / test (pull_request) Successful in 4s
Drop compromised eMudhra roots from the image CA store.
Install the patched ca-certificates package so outbound TLS rejects emSign ECC Root CA - G3.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-23 10:51:03 -05:00

30 lines
631 B
Docker

FROM python:3.12-slim
ENV PYTHONDONTWRITEBYTECODE=1 \
PYTHONUNBUFFERED=1 \
UV_COMPILE_BYTECODE=1 \
UV_LINK_MODE=copy \
UV_PROJECT_ENVIRONMENT=/app/.venv
WORKDIR /app
RUN apt-get update \
&& apt-get install -y --no-install-recommends ca-certificates libpq5 \
&& update-ca-certificates \
&& rm -rf /var/lib/apt/lists/*
COPY --from=ghcr.io/astral-sh/uv:latest /uv /usr/local/bin/uv
COPY pyproject.toml uv.lock ./
RUN uv sync --frozen --no-dev
COPY site ./site
COPY scripts/docker-entrypoint.sh /entrypoint.sh
RUN chmod +x /entrypoint.sh
WORKDIR /app/site
EXPOSE 8000
ENTRYPOINT ["/entrypoint.sh"]