<type>(scope): <description>

[body]

[footer(s)]

Containerfile

@@ -2,13 +2,8 @@
 
 ARG PY_IMAGE=python:3.12-slim
 
-# Stage 1: Base Builder
-FROM ${PY_IMAGE} AS base-builder
-
-RUN apt-get update && \
-    apt-get install -y --no-install-recommends \
-    curl git \
-    && rm -rf /var/lib/apt/lists/*
+# Stage 1: Builder
+FROM ${PY_IMAGE} AS builder
 
 COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
 
@@ -21,30 +16,18 @@ ENV PYTHONDONTWRITEBYTECODE=1 \
     UV_LINK_MODE=copy \
     UV_PROJECT_ENVIRONMENT=/opt/venv
 
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends \
+    curl git \
+    && rm -rf /var/lib/apt/lists/*
+
 COPY pyproject.toml uv.lock ./
 
-# Stage 2: Backend Builder
-FROM base-builder AS backend-builder
-
-COPY ./src ./src
-
 RUN uv sync --frozen --no-dev --no-cache --group backend
 
-# Stage 3: ML Builder
-FROM base-builder AS ml-builder
 
-COPY ./src ./src
-
-RUN uv sync --frozen --no-dev --no-cache --group ml
-
-
-# Stage 4: Backend Runtime
-FROM ${PY_IMAGE} AS backend
-
-RUN apt-get update && \
-    apt-get install -y --no-install-recommends \
-    curl \
-    && rm -rf /var/lib/apt/lists/*
+# Stage 2: Runtime
+FROM ${PY_IMAGE} AS runtime
 
 ENV PYTHONDONTWRITEBYTECODE=1 \
     PYTHONUNBUFFERED=1 \
@@ -54,22 +37,28 @@ ENV PYTHONDONTWRITEBYTECODE=1 \
 
 WORKDIR /app
 
-COPY --from=backend-builder /opt/venv /opt/venv
+RUN apk add --no-cache --virtual .runtime-deps \
+    curl && \
+    rm -rf /var/cache/apk/*
 
-COPY ./src/ ./
+RUN adduser -D -g '' app && chown -R app:app /app
+
+USER app
+
+COPY --from=builder --chown=app:app /opt/venv /opt/venv
+
+COPY --chown=app:app ./src/ ./
 
 EXPOSE 8080
 
-CMD [ "/opt/venv/bin/web_api_cli", "/app/config.toml" ]
+HEALTHCHECK --interval=30s --timeout=5s --start-period=5s --retries=3 \
+    CMD curl -fsS http://localhost:8080/healthcheck || exit 1
+
+CMD [ "web_api_cli", "/app/config.toml" ]
 
 
-# Stage 5: ML Runtime
-FROM ${PY_IMAGE} AS ml
-
-RUN apt-get update && \
-    apt-get install -y --no-install-recommends \
-    curl \
-    && rm -rf /var/lib/apt/lists/*
+# Stage 3: Testing
+FROM builder AS tests
 
 ENV PYTHONDONTWRITEBYTECODE=1 \
     PYTHONUNBUFFERED=1 \
@@ -79,39 +68,21 @@ ENV PYTHONDONTWRITEBYTECODE=1 \
 
 WORKDIR /app
 
-COPY --from=ml-builder /opt/venv /opt/venv
-
-COPY ./src/ ./
-
-EXPOSE 8081
-
-CMD [ "/opt/venv/bin/ml_api_cli", "/app/config.toml" ]
-
-
-# Stage 6: Testing
-FROM base-builder AS tests
-
-ENV PYTHONDONTWRITEBYTECODE=1 \
-    PYTHONUNBUFFERED=1 \
-    PYTHONOPTIMIZE=2 \
-    PATH="/opt/venv/bin:$PATH" \
-    PYTHONPATH="/app:$PYTHONPATH"
-
-WORKDIR /app
+RUN uv sync --no-install-project --group tests --frozen --no-cache
 
 COPY ./src ./src
 
 COPY ./tests ./tests
 
-RUN uv sync --group tests --frozen --no-cache
+RUN uv pip install -e .
 
 RUN mkdir -p /app/cov && mkdir /app/cov/html
 
 CMD [ "sh", "-c", "coverage run --source=src -m pytest -v && coverage report > /app/cov/coverage.txt && coverage xml -o /app/cov/coverage.xml && coverage html -d /app/cov/html" ]
 
 
-# Stage 7: Migrations
-FROM base-builder AS migrations
+# Stage 4: Migrations
+FROM builder AS migrations
 
 ENV PYTHONDONTWRITEBYTECODE=1 \
     PYTHONUNBUFFERED=1 \
@@ -123,12 +94,14 @@ WORKDIR /app
 
 RUN mkdir -p ./src/template_project
 
+RUN uv sync --no-install-project --group migrations --frozen --no-cache
+
 COPY ./src ./src
 
 COPY ./tests ./tests
 
 COPY ./alembic.ini ./
 
-RUN uv sync --group migrations --frozen --no-cache
+RUN uv pip install -e .
 
 CMD [ "alembic", "upgrade", "head" ]