Developer
a4e6c46a47
The compose file was forcing the container to run as uid 1001, so the entrypoint could not create /workspace even with sudo configured. - Remove Dockerfile USER directive so containers start as root - Make compile_compose use user: 0:0 when the manifest declares a user - Make the entrypoint drop to the container user via after setup, preserving environment variables and command arguments - Update unit tests to assert root startup and privilege drop Quality gates: - pytest tests/unit: 210 passed - ruff: clean on changed files - mypy: clean on changed files
26 lines
2.2 KiB
Markdown
26 lines
2.2 KiB
Markdown
# apps/api
|
|
dir: apps/api
|
|
|
|
index: apps/api/.pi-map.index.md
|
|
|
|
## role
|
|
FastAPI backend API that manages projects, git repositories, and development tools via Docker instances with PostgreSQL persistence.
|
|
## files
|
|
- .dockerignore | Specifies files and directories to exclude from Docker build context to reduce image size and avoid copying unnecessary files into containers. | dep: Docker
|
|
- Dockerfile | Multi-stage Docker build for a Python application with Docker socket access, Cloudflare tunneling, and database dependency waiting | dep: python:3.11-slim, gcc, libpq-dev, docker-ce-cli, docker-compose-plugin, cloudflared, uvicorn, pyproject.toml dependencies
|
|
- README.md | Documentation for a self-hosted FastAPI backend API that manages projects, git repositories, and development tools via Docker instances. | dep: FastAPI, SQLAlchemy, PostgreSQL, asyncpg, Alembic, Docker, Docker Compose, Authentik, uvicorn, pytest, ruff, mypy
|
|
- alembic.ini | Configuration file for Alembic database migration tool connecting to a PostgreSQL database with async driver | dep: alembic, sqlalchemy, asyncpg, PostgreSQL
|
|
- pyproject.toml | Defines Python project metadata, dependencies, and tool configurations for a FastAPI-based backend API called "headquarter-api" | dep: fastapi, uvicorn, sqlalchemy, asyncpg, alembic, pydantic, pydantic-settings, python-multipart, httpx, structlog, cryptography, pytest, pytest-asyncio, mypy, ruff, aiosqlite
|
|
- uv.lock | Lock file for the uv Python package manager that pins exact dependency versions and their artifact hashes for reproducible installations | dep: uv, Python 3.11+, aiosqlite, alembic, annotated-doc, annotated-types, anyio, ast-serialize, asyncpg, and many other PyPI packages
|
|
- wait-for-db.sh | Wait for a PostgreSQL database to become available before executing a command, with configurable retry logic. | dep: nc (netcat), sh (POSIX shell), sleep
|
|
## arch
|
|
Async Python/FastAPI service using multi-stage Docker builds, Alembic migrations, uv package management, and container orchestration with external tunneling and database dependency waiting patterns.
|
|
## tags
|
|
docker, alembic, python, database, fastapi, postgresql, asyncpg, uvicorn
|
|
## symbols
|
|
-
|
|
## workflows
|
|
-
|
|
## dirty
|
|
-
|