Create Dockerfile

Dockerfile

@@ -0,0 +1,145 @@
+# =============================================================================
+# Multi-stage Dockerfile for Webscout API Server
+# Optimized for production with security, performance, and size considerations
+# No external docker/ directory required - works with pip/git installations
+# =============================================================================
+
+# -----------------------------------------------------------------------------
+# Stage 1: Builder - Install dependencies and build the application
+# -----------------------------------------------------------------------------
+FROM python:3.11-slim as builder
+
+# Set build arguments for flexibility
+ARG WEBSCOUT_VERSION=latest
+ARG TARGETPLATFORM
+ARG BUILDPLATFORM
+
+# Set environment variables for build optimization
+ENV PYTHONUNBUFFERED=1 \
+    PYTHONDONTWRITEBYTECODE=1 \
+    PIP_NO_CACHE_DIR=1 \
+    PIP_DISABLE_PIP_VERSION_CHECK=1 \
+    PIP_DEFAULT_TIMEOUT=100
+
+# Install build dependencies
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    build-essential \
+    gcc \
+    git \
+    curl \
+    && rm -rf /var/lib/apt/lists/*
+
+# Create virtual environment for better dependency isolation
+RUN python -m venv /opt/venv
+ENV PATH="/opt/venv/bin:$PATH"
+
+# Upgrade pip and install build tools
+RUN pip install --upgrade pip setuptools wheel
+
+# Install webscout with API dependencies
+# Use specific version if provided, otherwise latest
+RUN if [ "$WEBSCOUT_VERSION" = "latest" ]; then \
+        pip install git+https://github.com/OEvortex/Webscout.git#egg=webscout[api]; \
+    else \
+        pip install git+https://github.com/OEvortex/Webscout.git@${WEBSCOUT_VERSION}#egg=webscout[api]; \
+    fi
+
+# Install additional production dependencies
+RUN pip install \
+    gunicorn[gthread] \
+    uvicorn[standard] \
+    prometheus-client \
+    structlog \
+    motor \
+    pymongo
+
+# -----------------------------------------------------------------------------
+# Stage 2: Runtime - Create minimal production image
+# -----------------------------------------------------------------------------
+FROM python:3.11-slim as runtime
+
+# Set runtime arguments and labels for metadata
+ARG BUILD_DATE
+ARG VCS_REF
+ARG VERSION
+
+LABEL maintainer="OEvortex" \
+      org.label-schema.build-date=$BUILD_DATE \
+      org.label-schema.name="webscout-api" \
+      org.label-schema.description="Webscout API Server - OpenAI-compatible LLM proxy" \
+      org.label-schema.url="https://github.com/OEvortex/Webscout" \
+      org.label-schema.vcs-ref=$VCS_REF \
+      org.label-schema.vcs-url="https://github.com/OEvortex/Webscout" \
+      org.label-schema.vendor="OEvortex" \
+      org.label-schema.version=$VERSION \
+      org.label-schema.schema-version="1.0"
+
+# Create non-root user for security
+RUN groupadd --gid 1000 webscout && \
+    useradd --uid 1000 --gid webscout --shell /bin/bash --create-home webscout
+
+# Set production environment variables
+ENV PYTHONUNBUFFERED=1 \
+    PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONPATH=/app \
+    PATH="/opt/venv/bin:$PATH" \
+    # Security settings
+    PYTHONHASHSEED=random \
+    # Performance settings
+    MALLOC_ARENA_MAX=2 \
+    # Application settings
+    WEBSCOUT_HOST=0.0.0.0 \
+    WEBSCOUT_PORT=7860 \
+    WEBSCOUT_WORKERS=1 \
+    WEBSCOUT_LOG_LEVEL=info \
+    # Authentication settings (new)
+    WEBSCOUT_NO_AUTH=true \
+    WEBSCOUT_NO_RATE_LIMIT=true \
+    WEBSCOUT_DATA_DIR=/app/data \
+    # FastAPI metadata (new)
+    WEBSCOUT_API_TITLE="Webscout OpenAI API" \
+    WEBSCOUT_API_DESCRIPTION="OpenAI API compatible interface for various LLM providers with enhanced authentication" \
+    WEBSCOUT_API_VERSION="0.2.0" \
+    WEBSCOUT_API_DOCS_URL="/docs" \
+    WEBSCOUT_API_REDOC_URL="/redoc" \
+    WEBSCOUT_API_OPENAPI_URL="/openapi.json"
+
+# Install only runtime dependencies
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    # Required for some Python packages
+    libffi8 \
+    libssl3 \
+    # Useful for debugging (can be removed for minimal image)
+    curl \
+    # Health check utilities
+    procps \
+    && rm -rf /var/lib/apt/lists/* \
+    && apt-get clean
+
+# Copy virtual environment from builder stage
+COPY --from=builder /opt/venv /opt/venv
+
+# Create application directory and set ownership
+WORKDIR /app
+RUN chown -R webscout:webscout /app
+
+# Copy application files (if building from source)
+# COPY --chown=webscout:webscout . /app
+
+# Create directories for logs and data with proper permissions
+RUN mkdir -p /app/logs /app/data && \
+    chown -R webscout:webscout /app/logs /app/data
+
+# Switch to non-root user
+USER webscout
+
+# Expose port (configurable via environment)
+EXPOSE $WEBSCOUT_PORT
+
+# Add health check
+HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
+    CMD curl -f http://localhost:${WEBSCOUT_PORT:-8000}/health || exit 1
+
+# Default command - start the webscout API server with new auth system
+# Environment variables will be used by the application
+CMD ["python", "-m", "webscout.auth.server"]