ADHDo/Dockerfile at main · adrianwedd/ADHDo · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
# Multi-stage build for MCP ADHD Server production deployment
FROM python:3.11-slim as builder

# Set build arguments
ARG BUILD_DATE
ARG VERSION
ARG VCS_REF

# Add labels for metadata
LABEL org.label-schema.build-date=$BUILD_DATE \
      org.label-schema.name="mcp-adhd-server" \
      org.label-schema.description="Meta-Cognitive Protocol server for ADHD executive function support" \
      org.label-schema.version=$VERSION \
      org.label-schema.vcs-ref=$VCS_REF \
      org.label-schema.vcs-url="https://github.com/adrianwedd/mcp-adhd-server" \
      org.label-schema.schema-version="1.0"

# Install system dependencies for building
RUN apt-get update && apt-get install -y \
    build-essential \
    git \
    && rm -rf /var/lib/apt/lists/*

# Set working directory
WORKDIR /build

# Copy dependency files
COPY pyproject.toml README.md ./
COPY src/ ./src/

# Install hatch and build the package
RUN pip install --no-cache-dir hatch
RUN hatch build

# Production stage
FROM python:3.11-slim as production

# Set build arguments for runtime
ARG BUILD_DATE
ARG VERSION
ARG VCS_REF

# Add metadata labels
LABEL org.label-schema.build-date=$BUILD_DATE \
      org.label-schema.name="mcp-adhd-server" \
      org.label-schema.description="Meta-Cognitive Protocol server for ADHD executive function support" \
      org.label-schema.version=$VERSION \
      org.label-schema.vcs-ref=$VCS_REF \
      org.label-schema.vcs-url="https://github.com/adrianwedd/mcp-adhd-server" \
      org.label-schema.schema-version="1.0"

# Create non-root user for security
RUN groupadd -r mcpuser && useradd -r -g mcpuser -s /bin/false mcpuser

# Install runtime system dependencies
RUN apt-get update && apt-get install -y \
    curl \
    postgresql-client \
    redis-tools \
    ca-certificates \
    && rm -rf /var/lib/apt/lists/* \
    && apt-get clean

# Set working directory
WORKDIR /app

# Copy built package from builder stage
COPY --from=builder /build/dist/*.whl /tmp/

# Install the package and dependencies
RUN pip install --no-cache-dir /tmp/*.whl && \
    rm /tmp/*.whl

# Create necessary directories
RUN mkdir -p /app/data /app/logs /app/static && \
    chown -R mcpuser:mcpuser /app

# Copy static files and templates
COPY static/ ./static/
COPY alembic/ ./alembic/
COPY alembic.ini ./

# Set ownership
RUN chown -R mcpuser:mcpuser /app

# Create health check script
RUN echo '#!/bin/bash\ncurl -f http://localhost:8000/health || exit 1' > /healthcheck.sh && \
    chmod +x /healthcheck.sh

# Switch to non-root user
USER mcpuser

# Set environment variables with production defaults
ENV PYTHONPATH=/app \
    PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
    PORT=8000 \
    HOST=0.0.0.0 \
    LOG_LEVEL=INFO \
    ENVIRONMENT=production

# Expose port
EXPOSE 8000

# Health check
HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
  CMD /healthcheck.sh

# Default command
CMD ["sh", "-c", "alembic upgrade head && uvicorn mcp_server.main:app --host $HOST --port $PORT --log-level $LOG_LEVEL"]

# Development stage (for testing and development)
FROM production as development

# Switch back to root to install dev dependencies
USER root

# Install development tools
RUN pip install --no-cache-dir \
    pytest>=7.4.0 \
    pytest-asyncio>=0.21.0 \
    pytest-mock>=3.12.0 \
    pytest-cov>=4.1.0 \
    black>=23.0.0 \
    ruff>=0.1.0 \
    mypy>=1.6.0 \
    ipython \
    jupyter

# Set development environment
ENV ENVIRONMENT=development \
    LOG_LEVEL=DEBUG

# Switch back to mcpuser
USER mcpuser

# Override command for development (with auto-reload)
CMD ["sh", "-c", "alembic upgrade head && uvicorn mcp_server.main:app --host $HOST --port $PORT --log-level $LOG_LEVEL --reload"]