Updated Dockerfile for improved security and maintainability

Author: schmichri

.dockerignore

@@ -0,0 +1,70 @@
+# Version control
+.git
+.github
+.gitignore
+
+# IDE and editor files
+.idea
+.vscode
+*.swp
+*.swo
+*~
+
+# Python artifacts
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+
+# Virtual environments
+myenv/
+venv/
+ENV/
+env/
+.env
+
+# Logs and databases
+logs/
+*.log
+*.sqlite3
+*.db
+
+# OS specific files
+.DS_Store
+Thumbs.db
+
+# Documentation and non-essential files
+docs/
+images/
+demo/
+*.md
+!README.md
+!CONTRIBUTING.md
+
+# Other project-specific files
+untitled/
+iunera/
+
+# Keep necessary files
+!code/
+!static/
+
+# Remove local configuration from code directory
+code/.env
+code/logs/

Dockerfile

@@ -1,19 +1,21 @@
 # Stage 1: Build stage
 FROM python:3.13-slim AS builder
 
-WORKDIR /app
-
-# Copy requirements file
-COPY code/requirements.txt .
-
-# Install build dependencies and Python packages
+# Install build dependencies
 RUN apt-get update && \
     apt-get install -y --no-install-recommends gcc python3-dev && \
     pip install --no-cache-dir --upgrade pip && \
-    pip install --no-cache-dir -r requirements.txt && \
     apt-get clean && \
     rm -rf /var/lib/apt/lists/*
 
+WORKDIR /app
+
+# Copy requirements file
+COPY code/requirements.txt .
+
+# Install Python packages
+RUN pip install --no-cache-dir -r requirements.txt
+
 # Stage 2: Runtime stage
 FROM python:3.13-slim
 
@@ -37,11 +39,7 @@ USER nlweb
 COPY code/ /app/
 COPY static/ /app/static/
 
-# Remove local logs and .env file
-RUN rm -r code/logs/* || true && \
-    rm -r code/.env || true
-
-    # Copy installed packages from builder stage
+# Copy installed packages from builder stage
 COPY --from=builder /usr/local/lib/python3.13/site-packages /usr/local/lib/python3.13/site-packages
 COPY --from=builder /usr/local/bin /usr/local/bin