FROM python:3.10-slim

# Create a non-root user
RUN adduser --disabled-password --gecos '' appuser

# Install dependencies
RUN apt-get update && apt-get install -y gcc && \
    pip install --no-cache-dir fastapi uvicorn transformers torch nltk && \
    python -c "import nltk; nltk.download('punkt')"

# Copy app and set permissions
WORKDIR /home/appuser/app
COPY --chown=appuser:appuser . .

# Switch to non-root user
USER appuser

# Run the app
CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "8080"]