chore: split dependencies and slim down the docker image

.dockerignore

@@ -0,0 +1,9 @@
+.git
+.github
+.idea
+**/__pycache__
+**/.mypy_cache
+.pytest_cache
+.coverage
+generation
+test

.github/workflows/ci.yaml

@@ -18,7 +18,7 @@ jobs:
           python-version: "3.15"
 
       - name: Install dependencies
-        run: pip install -r requirements.txt
+        run: pip install -r requirements-dev.txt
 
       - name: Run tests
         run: pytest
@@ -34,7 +34,7 @@ jobs:
           python-version: "3.15"
 
       - name: Install dependencies
-        run: pip install -r requirements.txt
+        run: pip install -r requirements-dev.txt
 
       - name: Run pylint
         run: pylint src --rcfile=.pylintrc --fail-under=9.5

.gitignore

@@ -2,3 +2,4 @@
 /generation
 __pycache__/
 .python-version
+.coverage

Dockerfile

@@ -1,30 +1,19 @@
-# Use Python 3.11 as the base image
 FROM python:3.15-slim
 
-# Install Tkinter dependencies
-RUN apt-get update && apt-get install -y --no-install-recommends \
-    python3-tk \
-    tk-dev \
-    && apt-get clean \
-    && rm -rf /var/lib/apt/lists/*
-
-# Set the working directory
 WORKDIR /app
 
-# Copy requirements.txt first to leverage Docker cache
+# Install the runtime dependencies first to leverage the Docker cache
 COPY requirements.txt .
-
-# Install project dependencies
 RUN pip install --no-cache-dir -r requirements.txt
-RUN pip install --no-cache-dir uvicorn
 
-# Now copy **everything** from the project root into /app
-COPY . /app
+# The API only needs the source code
+COPY src ./src
+
+# Run the application as an unprivileged user
+RUN useradd --create-home --uid 1000 app
+USER app
 
 # Expose the port that FastAPI will run on
 EXPOSE 8000
 
-ENV PYTHONPATH=/app/src
-
-# Command to run the application
-CMD ["python", "-m", "uvicorn", "src.controller:app", "--host", "0.0.0.0", "--port", "8000"]
+CMD ["python", "-m", "uvicorn", "controller:app", "--app-dir", "src", "--host", "0.0.0.0", "--port", "8000"]

requirements-dev.txt

@@ -0,0 +1,7 @@
+-r requirements.txt
+black~=26.10.1
+pylint~=4.1.3
+flake8~=7.5.0
+mypy~=2.4.0
+pytest~=9.1.1
+httpx~=0.28.1

requirements.txt

@@ -1,10 +1,4 @@
 numpy~=2.5.1
 fastapi~=0.162.0
-starlette~=1.10.0
-black~=26.10.1
-pylint~=4.1.3
-flake8~=7.5.0
-mypy~=2.4.0
 pillow~=13.0.0
-pytest~=9.1.1
-httpx~=0.28.1
+uvicorn~=0.54.0

src/controller.py

@@ -4,8 +4,7 @@
 
 import secrets
 
-from fastapi import FastAPI, Path
-from starlette.responses import Response
+from fastapi import FastAPI, Path, Response
 from fastapi.middleware.cors import CORSMiddleware
 
 from utils import globals as my_globals