Update code

Author: rudransh-shrivastava

backend/Makefile

@@ -28,7 +28,6 @@ clean-backend-docker:
 	@docker container rm -f nest-nestbot >/dev/null 2>&1 || true
 	@docker container rm -f nest-worker >/dev/null 2>&1 || true
 	@docker image rm -f nest-backend:base >/dev/null 2>&1 || true
-	@docker image rm -f nest-nestbot:base >/dev/null 2>&1 || true
 	@docker image rm -f nest-local-backend >/dev/null 2>&1 || true
 	@docker image rm -f nest-local-nestbot >/dev/null 2>&1 || true
 	@docker image rm -f nest-snapshot-video >/dev/null 2>&1 || true

docker-compose/local/compose.yaml

@@ -24,7 +24,7 @@ services:
       DJANGO_DB_USER: ${DJANGO_DB_USER:-nest_user_dev}
       DJANGO_REDIS_HOST: ${DJANGO_REDIS_HOST:-nest-cache}
       DJANGO_REDIS_PASSWORD: ${DJANGO_REDIS_PASSWORD:-nest-cache-password}
-      # Disable Slack in backend - routes won't be registered
+      # Disable Slack in backend - routes won't be registered.
       DJANGO_SLACK_BOT_TOKEN: None
       DJANGO_SLACK_SIGNING_SECRET: None
     networks:
@@ -35,39 +35,6 @@ services:
       - ../../backend:/home/owasp
       - backend-venv:/home/owasp/.venv
 
-  nestbot:
-    container_name: nest-nestbot
-    command: >
-      sh -c '
-        python manage.py migrate &&
-        python manage.py runserver 0.0.0.0:8001
-      '
-    image: nest-local-nestbot
-    build:
-      context: ../../backend
-      dockerfile: ../docker/backend/Dockerfile.nestbot.local
-    depends_on:
-      cache:
-        condition: service_healthy
-      db:
-        condition: service_healthy
-    env_file: ../../backend/.env
-    environment:
-      DJANGO_DB_HOST: ${DJANGO_DB_HOST:-db}
-      DJANGO_DB_NAME: ${DJANGO_DB_NAME:-nest_db_dev}
-      DJANGO_DB_PASSWORD: ${DJANGO_DB_PASSWORD:-nest_user_dev_password}
-      DJANGO_DB_PORT: ${DJANGO_DB_PORT:-5432}
-      DJANGO_DB_USER: ${DJANGO_DB_USER:-nest_user_dev}
-      DJANGO_REDIS_HOST: ${DJANGO_REDIS_HOST:-nest-cache}
-      DJANGO_REDIS_PASSWORD: ${DJANGO_REDIS_PASSWORD:-nest-cache-password}
-    networks:
-      - nest-network
-    ports:
-      - 8001:8001
-    volumes:
-      - ../../backend:/home/owasp
-      - nestbot-venv:/home/owasp/.venv
-
   cache:
     command: >
       sh -c '
@@ -144,6 +111,40 @@ services:
       - frontend-next:/home/owasp/.next
       - frontend-node-modules:/home/owasp/node_modules
 
+  nestbot:
+    container_name: nest-nestbot
+    command: >
+      sh -c '
+        python manage.py runserver 0.0.0.0:8001
+      '
+    image: nest-local-nestbot
+    build:
+      context: ../../backend
+      dockerfile: ../docker/backend/Dockerfile.nestbot.local
+    depends_on:
+      backend:
+        condition: service_started
+      cache:
+        condition: service_healthy
+      db:
+        condition: service_healthy
+    env_file: ../../backend/.env
+    environment:
+      DJANGO_DB_HOST: ${DJANGO_DB_HOST:-db}
+      DJANGO_DB_NAME: ${DJANGO_DB_NAME:-nest_db_dev}
+      DJANGO_DB_PASSWORD: ${DJANGO_DB_PASSWORD:-nest_user_dev_password}
+      DJANGO_DB_PORT: ${DJANGO_DB_PORT:-5432}
+      DJANGO_DB_USER: ${DJANGO_DB_USER:-nest_user_dev}
+      DJANGO_REDIS_HOST: ${DJANGO_REDIS_HOST:-nest-cache}
+      DJANGO_REDIS_PASSWORD: ${DJANGO_REDIS_PASSWORD:-nest-cache-password}
+    networks:
+      - nest-network
+    ports:
+      - 8001:8001
+    volumes:
+      - ../../backend:/home/owasp
+      - nestbot-venv:/home/owasp/.venv
+
   worker:
     container_name: nest-worker
     command: >
@@ -167,7 +168,6 @@ services:
       DJANGO_DB_USER: ${DJANGO_DB_USER:-nest_user_dev}
       DJANGO_REDIS_HOST: ${DJANGO_REDIS_HOST:-nest-cache}
       DJANGO_REDIS_PASSWORD: ${DJANGO_REDIS_PASSWORD:-nest-cache-password}
-      # Worker needs Slack tokens for SlackConfig.app.client (inherited from .env)
     networks:
       - nest-network
     volumes:

docker/backend/Dockerfile.local

@@ -1,5 +1,5 @@
 # python:slim is used as base image to keep the image size small
-FROM python:3.13-slim AS builder
+FROM python:3.13.7-slim AS builder
 
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 
@@ -13,8 +13,8 @@ ENV OWASP_GID=1000 \
 RUN apt-get update && apt-get install -y --no-install-recommends \
         build-essential \
         libffi-dev \
-        libssl-dev \
         libpq-dev \
+        libssl-dev \
         passwd \
         && rm -rf /var/lib/apt/lists/* && \
     groupadd -g ${OWASP_GID} owasp && \
@@ -31,10 +31,10 @@ WORKDIR /home/owasp
 COPY --chmod=444 --chown=root:root poetry.lock pyproject.toml ./
 RUN --mount=type=cache,target=${POETRY_CACHE_DIR},uid=${OWASP_UID},gid=${OWASP_GID} \
     --mount=type=cache,target=${PIP_CACHE_DIR} \
-    poetry install --no-root --without dev --without test --without video --without nestbot
+    poetry install --no-root --without dev --without nestbot --without test --without video
 
 # Runtime stage using python:slim
-FROM python:3.13-slim
+FROM python:3.13.7-slim
 
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 
@@ -45,14 +45,15 @@ ENV FORCE_COLOR=1 \
 
 RUN apt-get update && \
     apt-get install -y --no-install-recommends \
-        postgresql-client \
+        curl \
         libpq5 \
         passwd \
-        curl \
+        postgresql-client \
         && rm -rf /var/lib/apt/lists/* && \
     groupadd -g 1000 owasp && \
     useradd -u 1000 -g owasp -m -s /bin/bash owasp
 
+# Install poetry for runtime (needed for volume-based development setup)
 RUN --mount=type=cache,target=${PIP_CACHE_DIR} \
     python -m pip install poetry --cache-dir ${PIP_CACHE_DIR}
 

docker/backend/Dockerfile.nestbot.local

@@ -13,8 +13,8 @@ ENV OWASP_GID=1000 \
 RUN apt-get update && apt-get install -y --no-install-recommends \
         build-essential \
         libffi-dev \
-        libssl-dev \
         libpq-dev \
+        libssl-dev \
         passwd \
         && rm -rf /var/lib/apt/lists/* && \
     groupadd -g ${OWASP_GID} owasp && \
@@ -34,7 +34,7 @@ RUN --mount=type=cache,target=${POETRY_CACHE_DIR},uid=${OWASP_UID},gid=${OWASP_G
     poetry install --no-root --without dev --without test --without video
 
 # Runtime stage using python:slim
-FROM python:3.13-slim
+FROM python:3.13.7-slim
 
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 
@@ -45,14 +45,15 @@ ENV FORCE_COLOR=1 \
 
 RUN apt-get update && \
     apt-get install -y --no-install-recommends \
-        postgresql-client \
+        curl \
         libpq5 \
         passwd \
-        curl \
+        postgresql-client \
         && rm -rf /var/lib/apt/lists/* && \
     groupadd -g 1000 owasp && \
     useradd -u 1000 -g owasp -m -s /bin/bash owasp
 
+# Install poetry for runtime (needed for volume-based development setup)
 RUN --mount=type=cache,target=${PIP_CACHE_DIR} \
     python -m pip install poetry --cache-dir ${PIP_CACHE_DIR}