deploy-stack 0.2.7 → 0.2.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deploy-stack",
-  "version": "0.2.7",
+  "version": "0.2.8",
   "description": "Provision production-ready AWS infrastructure and CI/CD pipelines in seconds.",
   "type": "module",
   "bin": {

package/src/utils/warnings.js

@@ -14,7 +14,11 @@ export function getFrameworkWarning(frameworkId) {
                 color.yellow('\n    1. Ensure your package.json has a "start" script (e.g., "start": "node index.js").') +
                 color.yellow('\n    2. Your app must listen on 0.0.0.0 (not localhost) to receive traffic in Docker.\n\n')
             );
-        // Python / FastAPI warnings can be added here easily!
+        case 'python':
+            return color.yellow(' ⚠️  IMPORTANT: PYTHON SETUP REQUIRED ') +
+                color.yellow('\n    1. Ensure your requirements.txt includes your web framework (e.g., fastapi, uvicorn).') +
+                color.yellow('\n    2. Your app must listen on 0.0.0.0 (not localhost) to receive traffic in Docker.') +
+                color.yellow('\n    3. Ensure your app has a health check route returning 200 OK.\n\n');
         default:
             return '';
     }

package/templates/docker/python.Dockerfile

@@ -1,7 +1,26 @@
 FROM python:3.11-slim
+
+# Prevent Python from writing .pyc files and buffer stdout for cleaner logs
+ENV PYTHONDONTWRITEBYTECODE=1
+ENV PYTHONUNBUFFERED=1
+
 WORKDIR /app
+
+# Create a non-root user for security compliance
+RUN adduser --disabled-password --gecos '' appuser
+
+# Install dependencies without caching to keep the image size small
 COPY requirements.txt .
-RUN pip install -r requirements.txt
+RUN pip install --no-cache-dir -r requirements.txt
+
 COPY . .
+
+# Secure file permissions
+RUN chown -R appuser:appuser /app
+
+# Drop root privileges
+USER appuser
+
 EXPOSE {{PORT}}
+
 CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "{{PORT}}"]