FROM python:3.10-slim # 1. Install system dependencies from your old file RUN apt-get update && apt-get install -y \ libsndfile1 \ ffmpeg \ sox \ curl \ git-lfs \ pkg-config \ libfreetype6-dev \ libpng-dev \ build-essential \ && rm -rf /var/lib/apt/lists/* # 2. Create non-root user RUN useradd -m appuser # 3. Create directory structure (with proper ownership) RUN mkdir -p \ /tmp/matplotlib \ /tmp/fontconfig \ /tmp/lhotse \ /app/uploads \ /app/processed_audio \ /app/assets && \ chown -R appuser:appuser /app /tmp/matplotlib /tmp/fontconfig /tmp/lhotse # 4. Set working directory WORKDIR /app # 5. Copy application files with correct ownership COPY --chown=appuser:appuser . . # 6. Set environment variables from your old file ENV MPLCONFIGDIR=/tmp/matplotlib \ FONTCONFIG_PATH=/tmp/fontconfig \ LHOTSE_CACHE_DIR=/tmp/lhotse \ HF_HUB_ENABLE_HF_TRANSFER=1 \ PYTHONUNBUFFERED=1 # 7. Install Python dependencies as non-root user USER appuser RUN pip install --upgrade pip && \ pip install --no-cache-dir -r requirements.txt && \ python -m spacy download en_core_web_sm && \ pip check # 8. Health check - MODIFIED to use the new /health endpoint HEALTHCHECK --interval=30s --timeout=10s \ CMD curl -f http://localhost:7860/health || exit 1 # 9. Run the application - MODIFIED to use Uvicorn for FastAPI CMD ["python", "-m", "uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]