Deploy from GitHub: 7a7927111c5e8750df20b6932a399ea948a415d9

Dockerfile

@@ -40,9 +40,10 @@ COPY supervisord.conf /etc/supervisor/conf.d/supervisord.conf
 # Remove default nginx site
 RUN rm -f /etc/nginx/sites-enabled/default
 
-# Copy .env for backend (will be overridden by HF secrets)
-COPY backend/.env.example ./backend/.env
+# ── Startup script (writes HF secrets to .env) ──
+COPY start.sh /app/start.sh
+RUN chmod +x /app/start.sh
 
 EXPOSE 7860
 
-CMD ["supervisord", "-c", "/etc/supervisor/conf.d/supervisord.conf"]
+CMD ["/app/start.sh"]

backend/app/main.py

@@ -1,6 +1,10 @@
 # main.py — MERGED VERSION
 # Source backend routers (analyze, chat, doctor_upload) + scaffold routers (nutrition, exercise)
 
+import os
+from dotenv import load_dotenv
+load_dotenv()  # Load .env file before anything else
+
 from fastapi import FastAPI
 from fastapi.middleware.cors import CORSMiddleware
 from contextlib import asynccontextmanager
@@ -34,8 +38,11 @@ app.add_middleware(
     CORSMiddleware,
     allow_origins=[
         "http://localhost:3000",
+        "http://localhost:7860",
         "https://reportraahat.vercel.app",
         "https://*.vercel.app",
+        "https://*.hf.space",
+        "https://huggingface.co",
     ],
     allow_credentials=True,
     allow_methods=["*"],

start.sh

@@ -0,0 +1,17 @@
+#!/bin/bash
+# Startup script for HF Spaces
+# HF injects secrets as environment variables — write them to .env so dotenv can load them
+
+ENV_FILE="/app/backend/.env"
+
+# Write HF-injected secrets to .env
+echo "OPENROUTER_API_KEY=${OPENROUTER_API_KEY:-}" > "$ENV_FILE"
+echo "HF_TOKEN=${HF_TOKEN:-}" >> "$ENV_FILE"
+echo "HF_MODEL_ID=${HF_MODEL_ID:-CaffeinatedCoding/reportraahat-simplifier}" >> "$ENV_FILE"
+echo "HF_INDEX_REPO=${HF_INDEX_REPO:-CaffeinatedCoding/reportraahat-indexes}" >> "$ENV_FILE"
+echo "NEXT_PUBLIC_API_URL=http://localhost:8000" >> "$ENV_FILE"
+
+echo "✅ .env written with $(wc -l < $ENV_FILE) variables"
+
+# Start supervisord
+exec supervisord -c /etc/supervisor/conf.d/supervisord.conf