Dockerfile

# Build stage for client
FROM node:20 AS client-builder
WORKDIR /app/client
COPY client/package*.json ./
RUN npm install
COPY client/ .
RUN npm run build

# Build stage for server
FROM python:3.9-slim
WORKDIR /app

# Install system dependencies
RUN apt-get update && apt-get install -y \
    libxml-xpath-perl \
    pdfgrep \
    nodejs \
    npm \
    iproute2 \
    && rm -rf /var/lib/apt/lists/*

# Install serve globally
RUN npm install -g serve

# Create a non-root user
RUN useradd -m appuser

# Create necessary directories
RUN mkdir -p /app/exploit_seek_data/cache \
    /app/exploit_seek_data/databases \
    /app/exploit_seek_data/logs \
    /app/exploit_seek_data/reports \
    /app/exploit_seek_data/uploads

# Copy server files
COPY server/ /app/
RUN pip install --no-cache-dir -r requirements.txt
RUN pip install gunicorn gevent

# Copy built client files from client-builder stage
COPY --from=client-builder /app/client/dist /app/client/dist

# Copy and setup start script
COPY start.sh /app/
RUN sed -i 's/\r$//' /app/start.sh && \
    chmod +x /app/start.sh

# Change ownership of all directories to appuser
RUN chown -R appuser:appuser /app /home/appuser

# Switch to the non-root user
USER appuser

# Expose ports for both services
EXPOSE 5000 8080

CMD ["/app/start.sh"]