Dockerfile

FROM node:22-alpine AS frontend
WORKDIR /build
COPY frontend/package.json frontend/package-lock.json ./
RUN npm ci
COPY frontend/ .
RUN npx vite build --outDir dist

FROM python:3.12-slim
WORKDIR /app

ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1

COPY backend/requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt && \
    useradd -r -u 1000 -s /bin/false appuser && \
    mkdir -p /app/data && chown appuser:appuser /app/data

COPY backend/app ./app
COPY --from=frontend /build/dist ./static

ENV DB_PATH=/app/data/paperpulse.db
ENV STATIC_DIR=/app/static
ENV UVICORN_WORKERS=1

EXPOSE 8000

HEALTHCHECK --interval=30s --timeout=5s --start-period=15s --retries=3 \
  CMD python -c "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8000/api/health', timeout=3).read()" || exit 1

# For production with named volumes, uncomment: USER appuser
CMD uvicorn app.main:app --host 0.0.0.0 --port 8000 --workers ${UVICORN_WORKERS:-1}