After 312160c docker-compose doesn't load static files as the server
runs in development mode without DEBUG enabled.
Also, this commit makes sure it is loud and heard that running via
docker is not safe.

Signed-off-by: Hritik Vijay <[email protected]>

DJANGO_DEV is obsolete and now nowhere exists in the entire codebase

Signed-off-by: Hritik Vijay <[email protected]>

The docker setup present earlier used django development server to host
vulnerablecode, this is neither recommended nor safe. Also the server
did not drop privileges.
Docker environment vars are now easily configured via docker.env, also
the nginx template present in etc/nginx could be used in a non docker
setup with slight modifications.

Signed-off-by: Hritik Vijay <[email protected]>

Inspired by ScancodeIO. This Makefile makes the installation easy as
a cake.
The virtualenv zipapp used in this commit is obtained from
https://bootstrap.pypa.io/virtualenv/3.8/virtualenv.pyz
Note: sqlite support in this makefile is not implemented yet. It will be
done in next commits in this PR.

Signed-off-by: Hritik Vijay <[email protected]>

This will be essential after later commits as the existence of
SECRET_KEY in .env or environment is going to be non-optional.

Signed-off-by: Hritik Vijay <[email protected]>

This is not essential but promotes uniformity.
Also, `collectstatic` is removed from this test as this is not really
necessary.

Signed-off-by: Hritik Vijay <[email protected]>

Inspired by scancodeio, we now have a consistent ALLOWED_HOSTS
environment variable support. SECRET_KEY no longer defaults to insecure
values and is required to be generated. Static files are now served in
/var/vulnerablecode/static which is consistent to scancodeio.

Signed-off-by: Hritik Vijay <[email protected]>

File hierarchy inside docker container now looks similar to scancodeio.
postgres data is now a docker volume, so it will persist even after
recreation.  .dockerignores makes sure that we don't overpopulate docker
images, improving build times.  A common environment variable for
containers is kept in docker.env
The python image we are using now explicitly states python:3.8

NOTE: We should have a postgres health check script which uses python
manage.py check --database default which comes with max_retries and
backoffs for `vulnerablecode` container.  Currently, docker's `restart:`
option is used but it has a caveat that it'll restart on non-db errors
as well.

Signed-off-by: Hritik Vijay <[email protected]>

This calls for a lot of changes in other parts of documentation as well.
This will be done in later PRs. This commit marks the end of this PR.

Signed-off-by: Hritik Vijay <[email protected]>

This commit gets rid of using any type of cache (introduced in 135c95f)
This is to ensure having no surprises in future. This was discussed in
https://github.com/nexB/vulnerablecode/wiki/WeeklyMeetings#meeting-on-tuesday-2021-07-27-at-1300-utc

Signed-off-by: Hritik Vijay <[email protected]>

These are redundant after PR# 295.

Signed-off-by: Hritik Vijay <[email protected]>