| # Use the official Python 3.9 image | |
| FROM python:3.9-slim | |
| # Set environment variables | |
| ENV PYTHONDONTWRITEBYTECODE=1 \ | |
| PYTHONUNBUFFERED=1 | |
| # Create a non-root user with ID 1000 (Required for HF Spaces security) | |
| RUN useradd -m -u 1000 user | |
| # Set the working directory | |
| WORKDIR /app | |
| # Install dependencies (Doing this first leverages Docker cache) | |
| COPY requirements.txt . | |
| RUN pip install --no-cache-dir --upgrade pip && \ | |
| pip install --no-cache-dir -r requirements.txt | |
| # Copy the rest of the application code with correct permissions | |
| COPY --chown=user:user . . | |
| # Switch to the non-root user | |
| USER user | |
| # Expose the port Hugging Face expects | |
| EXPOSE 7860 | |
| # Run the application | |
| CMD ["python", "app.py"] |