bitfennec
1059be1b62
- Rust core engine with HTTP ingestion gateway, hybrid search, and white-box resume matching - Python edge collectors supporting declarative TOML and specialized adapters - PostgreSQL schema migrations with pgvector embedding support - Hardened security controls: strict CSP, terminal sanitization, and input boundary validation - Multi-service container orchestration with dedicated non-root execution
21 lines
469 B
Docker
21 lines
469 B
Docker
FROM python:3.12-slim
|
|
WORKDIR /app
|
|
|
|
COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
|
|
|
|
ENV UV_COMPILE_BYTECODE=1
|
|
ENV UV_LINK_MODE=copy
|
|
ENV PYTHONUNBUFFERED=1
|
|
|
|
COPY pyproject.toml uv.lock* ./
|
|
RUN uv sync --frozen --no-install-project || uv sync --no-install-project
|
|
|
|
RUN groupadd -g 10001 collector && useradd -u 10001 -g collector -m -s /bin/bash collector
|
|
|
|
COPY . ./
|
|
RUN chown -R collector:collector /app
|
|
|
|
USER collector
|
|
|
|
CMD ["uv", "run", "python", "runner.py"]
|