Dockerfile

# One image for both the worker and the dashboard; the command picks the role.
# Stage 1 builds wheels (needs pip's build tooling); stage 2 only installs them, so the
# final image carries no compilers, caches or source tree.

FROM python:3.12-slim-bookworm AS build
WORKDIR /src
ENV PIP_NO_CACHE_DIR=1 PIP_DISABLE_PIP_VERSION_CHECK=1
COPY pyproject.toml README.md LICENSE ./
COPY src ./src
RUN pip wheel --wheel-dir /wheels ".[dashboard]"

FROM python:3.12-slim-bookworm AS runtime
ENV PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1 PIP_NO_CACHE_DIR=1 \
    PIP_DISABLE_PIP_VERSION_CHECK=1
COPY --from=build /wheels /wheels
RUN pip install --no-index --find-links=/wheels "taskqueue[dashboard]" && rm -rf /wheels \
    && useradd --uid 10001 --no-create-home --shell /usr/sbin/nologin taskqueue
WORKDIR /app
# Demo tasks. A real deployment builds FROM this image and copies its own task modules.
COPY examples ./examples
USER 10001
EXPOSE 8000
# Exec form: the Python process is PID 1 and receives SIGTERM directly from the runtime.
ENTRYPOINT ["taskqueue"]
CMD ["worker", "--app", "examples.tasks:app", "--queues", "high,default", "--concurrency", "4"]