mirror of
https://github.com/suitenumerique/meet.git
synced 2026-10-21 20:15:29 +00:00
briquet
3bedae346c
Eight eMudhra intermediate CAs were compromised due to weak private keys, and the emSign Root CA - G3 / ECC Root CA - G3 roots have been removed from Mozilla and Chrome trust stores. Update uv, and bump certifi to 2026.10.19 and require ca-certificates >= 20261020-r0 in Alpine/Debian images Node.js has not shipped a fixed bundled root store yet.
42 lines
956 B
Docker
42 lines
956 B
Docker
FROM python:3.13.16-alpine3.24 AS base
|
|
|
|
RUN apk add --no-cache --upgrade 'ca-certificates>=20261020-r0'
|
|
|
|
|
|
# Install ffmpeg for audio/video processing (format conversion, extraction, compression)
|
|
# See summary/core/file_service.py for usage.
|
|
RUN apk add --no-cache "ffmpeg=8.1.2-r0"
|
|
|
|
FROM base AS builder
|
|
|
|
WORKDIR /app
|
|
|
|
COPY pyproject.toml .
|
|
|
|
RUN pip install --no-cache-dir .
|
|
|
|
FROM base AS development
|
|
WORKDIR /app
|
|
|
|
COPY . .
|
|
RUN pip install --no-cache-dir -e ".[dev]" || pip install --no-cache-dir -e .
|
|
|
|
CMD ["uvicorn", "summary.main:app", "--host", "0.0.0.0", "--port", "8000", "--reload"]
|
|
|
|
FROM base AS production
|
|
|
|
WORKDIR /app
|
|
|
|
COPY --from=builder /usr/local /usr/local
|
|
|
|
# Remove pip to reduce attack surface in production
|
|
RUN pip uninstall -y pip
|
|
|
|
# Un-privileged user running the application
|
|
ARG DOCKER_USER
|
|
USER ${DOCKER_USER}
|
|
|
|
COPY ./summary /app/summary
|
|
|
|
CMD ["uvicorn", "summary.main:app", "--proxy-headers", "--host", "0.0.0.0", "--port", "8000"]
|