shay7sev
a875fe9f63
Emit correlated JSON logs from the API and FunASR services, propagate request IDs to the client, and configure bounded opt-in Docker logging. Document the host-wide Grafana/Loki query workflow and keep observability deployment ownership outside the application repository.
63 lines
2.2 KiB
Docker
63 lines
2.2 KiB
Docker
# syntax=docker/dockerfile:1
|
|
|
|
FROM rust:1.85-bookworm AS builder
|
|
|
|
WORKDIR /build
|
|
|
|
COPY .cargo ./.cargo
|
|
COPY Cargo.toml Cargo.lock ./
|
|
COPY migrations ./migrations
|
|
COPY src ./src
|
|
|
|
RUN --mount=type=cache,id=teaching-feedback-cargo-registry,target=/usr/local/cargo/registry,sharing=locked \
|
|
--mount=type=cache,id=teaching-feedback-cargo-git,target=/usr/local/cargo/git,sharing=locked \
|
|
cargo fetch --locked
|
|
|
|
RUN --mount=type=cache,id=teaching-feedback-cargo-registry,target=/usr/local/cargo/registry,sharing=locked \
|
|
--mount=type=cache,id=teaching-feedback-cargo-git,target=/usr/local/cargo/git,sharing=locked \
|
|
--mount=type=cache,id=teaching-feedback-cargo-target,target=/build/target,sharing=locked \
|
|
cargo build --locked --release \
|
|
--bin teaching-feedback-api \
|
|
--bin migrate \
|
|
--bin migrate-user-owner \
|
|
&& mkdir -p /build/output \
|
|
&& cp target/release/teaching-feedback-api /build/output/teaching-feedback-api \
|
|
&& cp target/release/migrate /build/output/migrate \
|
|
&& cp target/release/migrate-user-owner /build/output/migrate-user-owner
|
|
|
|
FROM debian:bookworm-slim AS runtime
|
|
|
|
ARG DEBIAN_MIRROR=http://deb.debian.org
|
|
ARG APP_VERSION=0.2.0
|
|
ARG GIT_SHA=unknown
|
|
|
|
RUN sed -i "s|http://deb.debian.org|${DEBIAN_MIRROR}|g" /etc/apt/sources.list.d/debian.sources \
|
|
&& apt-get update \
|
|
&& apt-get install -y --no-install-recommends ca-certificates curl \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& groupadd --system --gid 10001 app \
|
|
&& useradd --system --uid 10001 --gid app --home-dir /nonexistent --shell /usr/sbin/nologin app \
|
|
&& install -d -o app -g app /data/audio
|
|
|
|
COPY --from=builder /build/output/teaching-feedback-api /usr/local/bin/teaching-feedback-api
|
|
COPY --from=builder /build/output/migrate /usr/local/bin/migrate
|
|
COPY --from=builder /build/output/migrate-user-owner /usr/local/bin/migrate-user-owner
|
|
|
|
ENV HOST=0.0.0.0 \
|
|
PORT=8080 \
|
|
AUDIO_STORAGE_DIR=/data/audio \
|
|
RUST_LOG=info \
|
|
APP_ENV=lan \
|
|
APP_VERSION=${APP_VERSION} \
|
|
GIT_SHA=${GIT_SHA} \
|
|
LOG_FORMAT=json
|
|
|
|
USER app
|
|
|
|
EXPOSE 8080
|
|
|
|
HEALTHCHECK --interval=15s --timeout=5s --start-period=30s --retries=10 \
|
|
CMD ["curl", "-fsS", "http://127.0.0.1:8080/health"]
|
|
|
|
CMD ["teaching-feedback-api"]
|