- Accept RBAC system: user_roles table, role_required decorator, grant_role/revoke_role/ensure_admin_role functions - Accept improved billing architecture: billing_customers table separation, provider-agnostic naming - Accept enhanced user loading with subscription/roles eager loading in app.py - Accept improved email templates with branded styling - Accept new infrastructure: migration tracking, transaction logging, A/B testing - Accept template improvements: Resend SDK, Tailwind build stage, UMAMI analytics config - Keep beanflows-specific configs: BASE_URL 5001, coffee PLAN_FEATURES/PLAN_LIMITS - Keep beanflows analytics integration and DuckDB health check - Add new test files and utility scripts from template Co-Authored-By: Claude Sonnet 4 <noreply@anthropic.com>
34 lines
1.2 KiB
Docker
34 lines
1.2 KiB
Docker
# CSS build stage (Tailwind standalone CLI, no Node.js)
|
|
FROM debian:bookworm-slim AS css-build
|
|
ADD https://github.com/tailwindlabs/tailwindcss/releases/latest/download/tailwindcss-linux-x64 /usr/local/bin/tailwindcss
|
|
RUN chmod +x /usr/local/bin/tailwindcss
|
|
WORKDIR /app
|
|
COPY src/ ./src/
|
|
RUN tailwindcss -i ./src/beanflows/static/css/input.css \
|
|
-o ./src/beanflows/static/css/output.css --minify
|
|
|
|
|
|
# Build stage
|
|
FROM python:3.12-slim AS build
|
|
COPY --from=ghcr.io/astral-sh/uv:0.8 /uv /uvx /bin/
|
|
WORKDIR /app
|
|
ENV UV_COMPILE_BYTECODE=1 UV_LINK_MODE=copy
|
|
COPY uv.lock pyproject.toml README.md ./
|
|
COPY src/ ./src/
|
|
RUN --mount=type=cache,target=/root/.cache/uv \
|
|
uv sync --no-dev --frozen
|
|
|
|
# Runtime stage
|
|
FROM python:3.12-slim AS runtime
|
|
ENV PATH="/app/.venv/bin:$PATH"
|
|
RUN useradd -m -u 1000 appuser
|
|
WORKDIR /app
|
|
RUN mkdir -p /app/data && chown -R appuser:appuser /app
|
|
COPY --from=build --chown=appuser:appuser /app .
|
|
COPY --from=css-build /app/src/beanflows/static/css/output.css ./src/beanflows/static/css/output.css
|
|
USER appuser
|
|
ENV PYTHONUNBUFFERED=1
|
|
ENV DATABASE_PATH=/app/data/app.db
|
|
EXPOSE 5000
|
|
CMD ["hypercorn", "beanflows.app:app", "--bind", "0.0.0.0:5000", "--workers", "1"]
|