# ========================================== # Builder Stage: Compile React Frontend # ========================================== FROM oven/bun:1-alpine AS frontend-builder WORKDIR /app # Monorepo — bun workspace with lockfile at repo root. Copy manifests first # so `bun install` caches independently of source edits. COPY package.json bun.lock ./ COPY frontend/package.json ./frontend/ RUN bun install --frozen-lockfile # Copy frontend source (already patched for Docker same-origin serving) COPY frontend/ ./frontend/ # Build static files (output lands in /app/frontend/dist) RUN bun run --cwd frontend build # ========================================== # Runtime Stage: Python & PyTorch Backend # ========================================== FROM pytorch/pytorch:2.8.0-cuda12.8-cudnn9-runtime AS runtime # Create a non-root user (Hugging Face Spaces requirement) RUN useradd -m -u 1000 user ENV HOME=/home/user WORKDIR $HOME/app # Enable unbuffered logs and optimizations ENV PYTHONDONTWRITEBYTECODE=1 ENV PYTHONUNBUFFERED=1 ENV UV_SYSTEM_PYTHON=1 ENV HF_HOME=$HOME/app/omnivoice_data/huggingface # Allow bare imports ENV PYTHONPATH=$HOME/app/backend # Allow all origins (HF Spaces iframe embedding) ENV OMNIVOICE_ALLOWED_ORIGINS="*" # Bind to 0.0.0.0 for Docker networking ENV OMNIVOICE_BIND_HOST="0.0.0.0" # Install system dependencies (FFmpeg is critical for torchaudio/scene splitting) RUN apt-get update && apt-get install -y --no-install-recommends \ build-essential \ ffmpeg \ libsndfile1 \ curl \ && rm -rf /var/lib/apt/lists/* # Install `uv` for blazing-fast reliable pip resolution RUN pip install --no-cache-dir uv # Copy python packaging specs COPY pyproject.toml uv.lock README.md ./ # Install the project RUN uv pip install --system --no-cache . # Copy application source COPY backend/ ./backend/ COPY omnivoice/ ./omnivoice/ # Copy the pre-built React frontend from the builder stage COPY --from=frontend-builder /app/frontend/dist ./frontend/dist # Pre-create the data directory so it is owned by the non-root user RUN mkdir -p $HOME/app/omnivoice_data/huggingface # Set ownership to the non-root user RUN chown -R user:user $HOME/app # Switch to the non-root user USER user # Expose the single unified API and UI port EXPOSE 3900 # Bind to 0.0.0.0 for external access ENTRYPOINT ["uvicorn", "backend.main:app", "--host", "0.0.0.0", "--port", "3900"]