production.Dockerfile

FROM python:3.8-slim
ENV PYTHONUNBUFFERED 1
RUN mkdir /code
WORKDIR /code

COPY . /code/

SHELL ["/bin/bash", "-o", "pipefail", "-c"]

RUN apt-get update \
    && apt-get install -y --no-install-recommends 'curl=7.*' 'git=1:2.*' 'build-essential=12.6' \
    && curl -sL https://deb.nodesource.com/setup_14.x | bash - \
    && apt-get install -y --no-install-recommends 'nodejs=14.*' \
    && npm install -g yarn@1 \
    && yarn config set network-timeout 300000 \
    && yarn --frozen-lockfile \
    && yarn build \
    && yarn --cwd plugins --frozen-lockfile --ignore-optional \
    && yarn cache clean \
    && rm -rf /var/lib/apt/lists/* \
    && rm -rf node_modules

# install dependencies but ignore any we don't need for dev environment
RUN pip install -r requirements.txt --no-cache-dir --compile \
    && pip uninstall ipython-genutils pip -y

# generate Django's static files
RUN SECRET_KEY='unsafe secret key for collectstatic only' DATABASE_URL='postgres:///' REDIS_URL='redis:///' python manage.py collectstatic --noinput

# remove build dependencies not needed at runtime
RUN apt-get purge -y git curl build-essential && apt-get autoremove -y

# add posthog user, move runtime files into home and change permissions
# this alleviates compliance issue for not running a container as root
RUN useradd -m posthog && mv /code /home/posthog && chown -R posthog:1000 /home/posthog/code

WORKDIR /home/posthog/code

USER posthog

EXPOSE 8000
CMD ["./bin/docker"]