FROM python:3.11-slim

# non-root user (HF recommendation)
RUN useradd -m -u 1000 user
USER user
ENV HOME=/home/user PATH=/home/user/.local/bin:$PATH
WORKDIR $HOME/app

# persistent storage on Spaces -> /data
RUN mkdir -p /data /data/models

# copy code
COPY --chown=user . $HOME/app

# install deps
RUN pip install --no-cache-dir -U pip \
 && pip install --no-cache-dir -r requirements.txt

# expose port and run
EXPOSE 7860
CMD ["gunicorn", "-k", "gevent", "-w", "1", "-b", "0.0.0.0:7860", "app:app"]