FROM python:3.9-slim

WORKDIR /app

# 複製 requirements 並安裝
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt

# 複製所有程式碼 (包含 prompts 資料夾)
COPY . .

# 建立非 root 用戶 (Hugging Face 建議的安全設置)
RUN useradd -m -u 1000 user
USER user

EXPOSE 7860

CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]