Dockerfile

# syntax=docker/dockerfile:1.7

# --- app source: cleanup + normalize ownership/permissions ---
FROM python:3.13-slim AS appsrc
WORKDIR /src
COPY . /src
RUN rm -rf /src/.venv /src/.vscode /src/.idea || true \
 && rm -rf /src/docker || true \
 && find /src -type d -name "__pycache__" -prune -exec rm -rf {} + || true \
 && find /src -type d -name "@eaDir" -prune -exec rm -rf {} + || true \
 && find /src -type d -empty -delete || true \
 && find /src -maxdepth 2 -type f -name "packaging.py" -delete || true \
 && find /src -maxdepth 2 -type d -name "packaging" -exec rm -rf {} + || true \
 && find /src -type d -exec chmod 0755 {} + \
 && find /src -type f -exec chmod 0644 {} +

FROM python:3.13-slim

LABEL org.opencontainers.image.description="One brain for all your media syncs A single place to configure everything."

# --- env ---
ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
    PIP_NO_CACHE_DIR=1 \
    PYTHONPATH=/app \
    TZ=Europe/Amsterdam

# --- minimal OS deps ---
RUN apt-get update \
 && apt-get install -y --no-install-recommends ca-certificates tzdata bash curl util-linux nano \
 && rm -rf /var/lib/apt/lists/*

WORKDIR /app

# --- runtime user ---
ARG APP_USER=appuser
ARG APP_GROUP
ARG APP_UID=1000
ARG APP_GID=1000
RUN APP_GROUP="${APP_GROUP:-${APP_USER}}" \
 && groupadd -g "${APP_GID}" "${APP_GROUP}" \
 && useradd -m -u "${APP_UID}" -g "${APP_GROUP}" -s /bin/bash "${APP_USER}"

# --- deps
COPY requirements.txt /app/requirements.txt
RUN --mount=type=cache,target=/root/.cache/pip \
    python -m pip install --upgrade pip setuptools wheel && \
    pip install -r requirements.txt

# --- app code ---
COPY --from=appsrc --chown=root:root /src /app

# --- scripts ---
COPY docker/entrypoint.sh /usr/local/bin/entrypoint.sh
COPY docker/run-sync.sh   /usr/local/bin/run-sync.sh
COPY docker/cw            /usr/local/bin/cw
RUN chmod +x /usr/local/bin/entrypoint.sh /usr/local/bin/run-sync.sh /usr/local/bin/cw /app/cli/cw.py

# --- runtime env ---
ARG APP_VERSION=v0.0.0
ENV APP_VERSION=${APP_VERSION}
RUN printf '%s' "${APP_VERSION}" > /app/VERSION && chmod 0444 /app/VERSION
ENV RUNTIME_DIR=/config \
    WEB_HOST=0.0.0.0 \
    WEB_PORT=8787 \
    CW_CLI_ONLY=0 \
    DEV_SHELL_ON_FAIL=yes \
    EDITOR=nano \
    VISUAL=nano

# --- healthcheck ---
HEALTHCHECK --interval=30s --timeout=5s --retries=5 \
  CMD ["python","-c","import os,socket,sys; s=socket.socket(); s.settimeout(2); p=int(os.environ.get('WEB_PORT','8787')); sys.exit(0 if s.connect_ex(('127.0.0.1',p))==0 else 1)"]

EXPOSE 8787
VOLUME ["/config"]

ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]