Dockerfile stage that installs uWSGI and sets non-root permissions

Dockerfile

FROM base AS production

# Let's allow .pycs again
ENV PYTHONDONTWRITEBYTECODE=0

# Needed to compile uwsgi, clean up after
RUN --mount=type=cache,target=/var/cache/apt apt-get update && apt-get install -y --no-install-recommends \
    build-essential \
    python3-dev \
    libpcre3-dev \
    && apt-get clean && rm -rf /var/lib/apt/lists/*

RUN --mount=type=cache,target=/root/.cache/pip pip --no-cache-dir install uwsgi

COPY uwsgi.ini ./

# Best practice not to give pwners free root
RUN useradd -m docker
RUN mkdir -p /home/docker/rik_proovitöö/run /home/docker/rik_proovitöö/static_collected
RUN chown -R docker:docker /home/docker/rik_proovitöö
RUN chmod 755 /home/docker/rik_proovitöö/run
USER docker

COPY rik_proovitöö ./rik_proovitöö