updated dockerfile and settings for production

Author: DanShinde

Dockerfile

@@ -1,29 +1,68 @@
-FROM python:3.12
+# FROM python:3.12
 
-# Ensure Python output is not buffered
-ENV PYTHONUNBUFFERED=1
+# # Ensure Python output is not buffered
+# ENV PYTHONUNBUFFERED=1
 
-# Set working directory inside the container
+# # Set working directory inside the container
+# WORKDIR /app
+
+# # Copy dependencies list to container
+# COPY requirements.txt .
+
+# # Install dependencies
+# RUN pip install --no-cache-dir -r requirements.txt
+
+# # Copy the entire application to the container
+# COPY . .
+
+# # Create static directory
+# RUN mkdir -p /app/static
+
+# # # Collect static files during image build
+# # RUN python manage.py collectstatic --noinput
+
+
+# # Expose the port your application will run on
+# EXPOSE 8000
+
+# # Default command to run the application
+# CMD ["python", "manage.py", "runserver", "0.0.0.0:8000"]
+
+# Use a slim Python image to reduce size
+FROM python:3.12-slim
+
+# Set environment variables
+ENV PYTHONUNBUFFERED=1 \
+    PYTHONDONTWRITEBYTECODE=1 \
+    PIP_NO_CACHE_DIR=1 \
+    PIP_DISABLE_PIP_VERSION_CHECK=1
+
+# Install system dependencies (needed for PostgreSQL, etc.)
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends \
+    build-essential \
+    libpq-dev \
+    && rm -rf /var/lib/apt/lists/*
+
+# Set the working directory
 WORKDIR /app
 
-# Copy dependencies list to container
+# Copy and install Python dependencies first (for caching)
 COPY requirements.txt .
-
-# Install dependencies
 RUN pip install --no-cache-dir -r requirements.txt
 
-# Copy the entire application to the container
+# Copy the rest of the application
 COPY . .
 
-# Create static directory
-RUN mkdir -p /app/static
-
-# # Collect static files during image build
-# RUN python manage.py collectstatic --noinput
+# Collect static files (Render expects them in `/app/static`)
+RUN python manage.py collectstatic --noinput
 
+# Run as a non-root user (security best practice)
+RUN useradd -m appuser && chown -R appuser:appuser /app
+USER appuser
 
-# Expose the port your application will run on
+# Expose the port Render will use (8000 by default)
 EXPOSE 8000
 
-# Default command to run the application
-CMD ["python", "manage.py", "runserver", "0.0.0.0:8000"]
+# Start Gunicorn (production-ready WSGI server)
+CMD ["gunicorn", "--bind", "0.0.0.0:8000", "--workers", "4", "IOLGenv2_BackEnd.wsgi:application"]

IOLGenv2_BackEnd/settings.py

@@ -50,7 +50,6 @@
     'rest_framework_simplejwt.token_blacklist',
     "corsheaders",
     'import_export',
-    'debug_toolbar',
     'widget_tweaks',
     'accounts',
     'ACGen',
@@ -69,7 +68,6 @@
     'django.contrib.auth.middleware.AuthenticationMiddleware',
     'django.contrib.messages.middleware.MessageMiddleware',
     'django.middleware.clickjacking.XFrameOptionsMiddleware',
-    'debug_toolbar.middleware.DebugToolbarMiddleware',
 ]
 
 ROOT_URLCONF = 'IOLGenv2_BackEnd.urls'
@@ -124,6 +122,12 @@
 
 load_dotenv()
 
+DEBUG = os.getenv('DEBUG', 'False') == 'True'
+
+if DEBUG:
+    INSTALLED_APPS += ['debug_toolbar']
+    MIDDLEWARE += ['debug_toolbar.middleware.DebugToolbarMiddleware']
+
 DATABASE_URL = os.getenv("DATABASE_URL")  # Get the env variable
 
 if DATABASE_URL:  # Only parse if DATABASE_URL is set

requirements.txt

@@ -17,4 +17,5 @@ pandas
 django-widget-tweaks
 whitenoise
 waitress
-ioview-firebase-adminsdk
+ioview-firebase-adminsdk
+gunicorn==21.2.0