Summary

Package the application into production-ready container images with a CI pipeline for automated building, scanning, and publishing.

Design Spec Reference

• §15.2 Technology Stack — Containerization row
• §15.3 Project Structure — docker/ directory layout

Scope

• Backend container image (multi-stage build, hardened runtime, non-root)
• Web/proxy container image (reverse proxy with SPA routing, API/WebSocket proxy)
• Docker Compose for local development and deployment
• CI workflow: build → vulnerability scan → push to registry → image signing
• Environment configuration via .env
• Image tagging strategy (version from pyproject.toml, semver, SHA)

Notes

• Specific base images, registry, and scanning tools should be evaluated at implementation time — reference DESIGN_SPEC.md §15.2 for context