Add prod container elements

Author: aaronk

Dockerfile

@@ -1,18 +1,39 @@
+# syntax=docker/dockerfile:experimental
 FROM python:3.6
 
-RUN apt-get update \
-    && apt-get install -y --no-install-recommends \
+EXPOSE 80
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    libsasl2-dev libldap2-dev libssl-dev \
+    nginx supervisor \
     && rm -rf /var/lib/apt/lists/*
+RUN mkdir ~/.ssh && echo "Host git*\n\tStrictHostKeyChecking no\n" >> ~/.ssh/config
+RUN echo 'TLS_REQCERT allow' >> /etc/ldap/ldap.conf
+
+RUN echo "daemon off;" >> /etc/nginx/nginx.conf
+COPY etc/nginx.conf /etc/nginx/sites-available/default
+COPY etc/supervisor.conf /etc/supervisor/conf.d/app.conf
 
 WORKDIR /usr/src/app
 COPY requirements.txt ./
-RUN pip3 install -r requirements.txt
-COPY . .
 
-RUN python3 ./manage.py initial_setup
-RUN python3 ./manage.py load_test_data
+ARG IFXURLS_COMMIT=549af42dbe83d07b12dd37055a5ec6368d4b649
+ARG NANITES_CLIENT_COMMIT=a11ff96ccb2c888d0d07ac97f27de1153463bf59
+ARG IFXUSER_COMMIT=8832f49c218375eb1a2f0a4a4488d33fd76ccbb6
+ARG FIINE_CLIENT_COMMIT=b944730dcdf7de9df3479efdeb48848813a14032
+ARG IFXBILLING_COMMIT=89382408913ac3a3292493dbcf5fbde1573be120
+
+RUN --mount=type=ssh pip install --upgrade pip && \
+    pip install 'Django>2.2,<3' && \
+    pip install django-author==1.0.2 && \
+    pip install git+ssh://[email protected]/harvardinformatics/ifxurls.git@${IFXURLS_COMMIT} && \
+    pip install git+ssh://[email protected]/harvardinformatics/nanites.client.git@${NANITES_CLIENT_COMMIT} && \
+    pip install git+ssh://[email protected]/harvardinformatics/ifxuser.git@${IFXUSER_COMMIT} && \
+    pip install git+ssh://[email protected]/informatics/fiine.client.git@${FIINE_CLIENT_COMMIT} && \
+    pip install git+ssh://[email protected]/informatics/ifxbilling.git@${IFXBILLING_COMMIT} && \
+    pip install ldap3 django_auth_ldap && \
+    pip install -r requirements.txt
+
+COPY . .
 
-ENV DEBUG=True
+CMD ./manage.py collectstatic --no-input && ./manage.py makemigrations && ./manage.py migrate && /usr/bin/supervisord -n
 
-EXPOSE 8000
-CMD ["python", "manage.py", "runserver", "0.0.0.0:8000"]

etc/nginx.conf

@@ -0,0 +1,33 @@
+upstream wsgisock {
+  # fail_timeout=0 means we always retry an upstream even if it failed
+  # to return a good HTTP response (in case the Unicorn master nukes a
+  # single worker for timing out).
+
+  server unix:/app/app.sock fail_timeout=0;
+}
+
+error_log /dev/stdout info;
+
+server {
+    listen  80 default_server;
+    proxy_pass_request_headers on;
+    underscores_in_headers on;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header Host $http_host;
+    client_max_body_size 4000M;
+
+    proxy_redirect off;
+
+    server_name localhost;
+    charset     utf-8;
+
+    location /static {
+        alias /static;
+    }
+
+    location / {
+        proxy_pass http://wsgisock;
+    }
+
+    access_log /dev/stdout;
+}

etc/supervisor.conf

@@ -0,0 +1,14 @@
+[program:gunicorn]
+command = /usr/local/bin/gunicorn wsgi:application --bind=unix:/app/app.sock --workers=3 --timeout 3600 --log-file -
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes=0
+stderr_logfile=/dev/stderr
+stderr_logfile_maxbytes=0
+
+[program:nginx]
+command = /usr/sbin/nginx
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes=0
+stderr_logfile=/dev/stderr
+stderr_logfile_maxbytes=0
+