Dockerfile

FROM node:lts-alpine as nest-frontend

RUN mkdir /app
WORKDIR /app

# Required system packages
RUN apk add --update --no-cache git

COPY .nvmrc package.json package-lock.json /app/
RUN npm ci

# Copy application files
COPY tsconfig.json tsconfig.node.json vite.config.ts schema.json tailwind.config.js postcss.config.cjs /app/
COPY frontend /app/frontend/

RUN npm run build:production

# ----------------------------------------------------------

FROM python:3.11.1-slim as nest

ENV PYTHONUNBUFFERED=1
ENV PYTHONPATH /app/

# Add app user
RUN groupadd -r nest && useradd --create-home nest -g nest

RUN apt-get update \
    && DEBIAN_FRONTEND=noninteractive apt-get install -y \
    bash-completion \
    less \
    lsof \
    libpq-dev  \
    python3-dev \
    vim \
    curl \
    postgresql \
    gcc \
    awscli \
    && rm -rf /var/lib/apt/lists/*

RUN pip install --upgrade pip
RUN pip install --no-cache poetry==1.3.2

# Create app directory and required subdirectories
RUN mkdir -p /app/static
RUN chown -R nest:nest /app

# Set app user and working directory
USER nest
WORKDIR /app
ENV HOME=/app

COPY --chown=nest poetry.lock pyproject.toml poetry.toml manage.py .env.test /app/
RUN poetry install --no-root --only main --no-interaction --no-ansi

# Render needs a .ssh folder to make ssh tunneling work.
RUN mkdir ./.ssh && chmod 700 ./.ssh

# Remove unused apt packages
USER root
RUN apt-get purge -y gcc && \
    apt-get autoremove -y && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/*
USER nest

# Copy application files
COPY --chown=nest nest/ /app/nest/
COPY --chown=nest cli/ /app/cli/

COPY --chown=nest --from=nest-frontend /app/static/dist/ /app/static/dist/

ENV DJANGO_VITE_DEV_MODE=False

COPY --chown=nest docker-entrypoint.sh /app

RUN chmod +x docker-entrypoint.sh
ENTRYPOINT ["./docker-entrypoint.sh"]