FROM python:3.11-slim

WORKDIR /app

# Dipendenze di sistema richieste da Chromium (Playwright)
RUN apt-get update && apt-get install -y --no-install-recommends \
    wget gnupg ca-certificates \
    libnss3 libnspr4 libatk1.0-0 libatk-bridge2.0-0 libcups2 \
    libdrm2 libdbus-1-3 libxkbcommon0 libxcomposite1 libxdamage1 \
    libxfixes3 libxrandr2 libgbm1 libasound2 libpango-1.0-0 \
    libcairo2 libatspi2.0-0 libx11-6 libxext6 fonts-liberation \
    && rm -rf /var/lib/apt/lists/*

COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt
RUN python -m playwright install chromium

COPY . .

# HF Spaces esegue il container come utente non-root (id 1000)
RUN mkdir -p /app/database && chmod -R 777 /app
USER 1000

EXPOSE 7860
ENV PYTHONUNBUFFERED=1

CMD ["python", "app.py"]