generated from coulomb/repo-seed
tegwick
e28739f8f1
The Dockerfile asset stage copied only static/src + vite.config.js, never the HTML templates. Tailwind v4 generates CSS by scanning source files for class usage, so with no templates present it emitted a stripped CSS with zero utility classes — breaking layout and ballooning SVG icons (w-5/h-5 no longer applied) on deployed builds. - main.css: add explicit @source directive for the templates dir so content detection no longer depends on the build CWD. - Dockerfile: copy vergabe_teilnahme/templates into the assets stage so the @source path resolves at build time. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
90 lines
3.2 KiB
Docker
90 lines
3.2 KiB
Docker
# syntax=docker/dockerfile:1.7
|
|
#
|
|
# Build:
|
|
# docker build \
|
|
# --build-context issue-core=/home/worsch/issue-core \
|
|
# -t gitea.coulomb.social/coulomb/vergabe-teilnahme:<tag> .
|
|
#
|
|
# The `issue-core` named context is required because pyproject.toml has
|
|
# a path dependency on a sibling repo; uv.lock pins it as "../issue-core".
|
|
|
|
|
|
# ─── Stage 1 ─── Vite + Tailwind asset build ────────────────────────────────
|
|
FROM node:22-alpine AS assets
|
|
WORKDIR /build
|
|
COPY package.json package-lock.json ./
|
|
RUN npm ci --no-audit --no-fund
|
|
COPY vite.config.js ./
|
|
COPY static/src ./static/src
|
|
# Tailwind v4 scans these for utility-class usage at build time. They must be
|
|
# present or the generated CSS omits every utility class (broken layout, giant
|
|
# SVG icons). Paths mirror the @source directive in static/src/main.css.
|
|
COPY vergabe_teilnahme/templates ./vergabe_teilnahme/templates
|
|
RUN npm run build
|
|
# Output: /build/static/dist/main.css
|
|
|
|
|
|
# ─── Stage 2 ─── Python deps via uv ─────────────────────────────────────────
|
|
FROM python:3.12-slim-bookworm AS python-deps
|
|
|
|
ENV PYTHONDONTWRITEBYTECODE=1 \
|
|
PYTHONUNBUFFERED=1 \
|
|
UV_LINK_MODE=copy \
|
|
UV_PYTHON_DOWNLOADS=never
|
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
build-essential libpq-dev curl ca-certificates \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
COPY --from=ghcr.io/astral-sh/uv:0.5.11 /uv /usr/local/bin/uv
|
|
|
|
COPY --from=issue-core . /issue-core/
|
|
WORKDIR /app
|
|
COPY pyproject.toml uv.lock ./
|
|
RUN uv sync --frozen --no-dev --no-install-project
|
|
|
|
|
|
# ─── Stage 3 ─── Runtime image ──────────────────────────────────────────────
|
|
FROM python:3.12-slim-bookworm AS runtime
|
|
|
|
ENV PYTHONDONTWRITEBYTECODE=1 \
|
|
PYTHONUNBUFFERED=1 \
|
|
DJANGO_SETTINGS_MODULE=vergabe_teilnahme.settings.prod \
|
|
PATH=/app/.venv/bin:$PATH \
|
|
PORT=8000
|
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
libpq5 curl ca-certificates \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& groupadd -r app && useradd -r -g app -d /app -s /sbin/nologin app
|
|
|
|
WORKDIR /app
|
|
|
|
COPY --from=python-deps /issue-core /issue-core
|
|
COPY --from=python-deps /app/.venv ./.venv
|
|
|
|
COPY --chown=app:app manage.py pyproject.toml ./
|
|
COPY --chown=app:app vergabe_teilnahme ./vergabe_teilnahme
|
|
COPY --chown=app:app static/src ./static/src
|
|
COPY --chown=app:app static/vendor ./static/vendor
|
|
COPY --chown=app:app templates ./templates
|
|
COPY --from=assets --chown=app:app /build/static/dist ./static/dist
|
|
|
|
RUN mkdir -p ./media ./staticfiles ./.issue-facade && chown -R app:app /app
|
|
|
|
# collectstatic needs SECRET_KEY + ALLOWED_HOSTS but no DB; provide placeholders.
|
|
RUN SECRET_KEY=build-only ALLOWED_HOSTS=localhost \
|
|
python manage.py collectstatic --noinput
|
|
|
|
USER app
|
|
EXPOSE 8000
|
|
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=20s --retries=3 \
|
|
CMD curl -fsS http://127.0.0.1:8000/health/ || exit 1
|
|
|
|
CMD ["gunicorn", "vergabe_teilnahme.wsgi:application", \
|
|
"--bind", "0.0.0.0:8000", \
|
|
"--workers", "3", \
|
|
"--access-logfile", "-", \
|
|
"--error-logfile", "-"]
|