Upload 2 files

Dockerfile

@@ -1,86 +1,59 @@
-# ─────────────────────────────────────────────────────────────────────────────
-# Kentro – HuggingFace Zip Deploy
-# Upload ONLY this Dockerfile + kentro_upload.zip to your HF Space root.
-#
-# REDIS SETUP (free, takes 2 minutes):
-#   1. Go to https://upstash.com → create free Redis DB
-#   2. Copy the "Redis URL" (starts with rediss://)
-#   3. In your HF Space → Settings → Repository secrets
-#      Add secret:  REDIS_URL = rediss://...your url...
-#   Without Redis the app still works — AI moves use direct callback instead.
-# ─────────────────────────────────────────────────────────────────────────────
-
-# ── Stage 1: Build React frontend ─────────────────────────────────────────────
-FROM node:20-alpine AS frontend-builder
-
+# ═══════════════════════════════════════════════════════
+#  Kentro – Nigerian Draughts Platform
+#  Multi-stage build: unzip src → build frontend → build backend → runtime
+# ═══════════════════════════════════════════════════════
+
+# ── Stage 1: Unpack source ────────────────────────────────────────────────────
+FROM alpine:3.19 AS unpacker
+WORKDIR /src
 RUN apk add --no-cache unzip
+COPY kentro_src.zip .
+RUN unzip kentro_src.zip && rm kentro_src.zip
 
+# ── Stage 2: Build React frontend ─────────────────────────────────────────────
+FROM node:20-alpine AS frontend-builder
 WORKDIR /build
-COPY kentro_deploy.zip .
-RUN unzip -q kentro_deploy.zip && rm -f kentro_deploy.zip
-
-WORKDIR /build/frontend
-RUN npm install --prefer-offline --no-audit --no-fund
+COPY --from=unpacker /src/frontend/package*.json ./
+RUN npm ci --silent
+COPY --from=unpacker /src/frontend/ .
 RUN npm run build
 
-# ── Stage 2: Build Go backend ──────────────────────────────────────────────────
+# ── Stage 3: Build Go backend ─────────────────────────────────────────────────
 FROM golang:1.22-alpine AS backend-builder
-
-RUN apk add --no-cache gcc musl-dev unzip
-
 WORKDIR /build
-COPY kentro_deploy.zip .
-RUN unzip -q kentro_deploy.zip && rm -f kentro_deploy.zip
-
-WORKDIR /build/backend
+COPY --from=unpacker /src/backend/go.mod /src/backend/go.sum ./
 RUN go mod download
-RUN go mod tidy
-RUN CGO_ENABLED=1 GOOS=linux go build \
-    -ldflags="-s -w -extldflags '-static'" \
-    -o kentro_server ./cmd/server
-
-# ── Stage 3: Runtime ───────────────────────────────────────────────────────────
-FROM python:3.11-slim AS runtime
-
-RUN apt-get update && apt-get install -y --no-install-recommends \
-    libsqlite3-0 unzip wget \
-    && rm -rf /var/lib/apt/lists/*
+COPY --from=unpacker /src/backend/ .
+RUN CGO_ENABLED=0 GOOS=linux go build -ldflags="-s -w" -o server ./cmd/server
 
+# ── Stage 4: Runtime image ────────────────────────────────────────────────────
+FROM python:3.11-slim
 WORKDIR /app
 
-# Copy compiled artifacts
-COPY --from=backend-builder  /build/backend/kentro_server  ./kentro_server
-COPY --from=frontend-builder /build/frontend/dist           ./frontend/dist
-
-# Extract Python engine files from zip, then delete zip
-COPY kentro_deploy.zip /tmp/k.zip
-RUN unzip -q /tmp/k.zip -d /tmp/src \
-    && cp /tmp/src/nigerian_draughts.py . \
-    && cp /tmp/src/engine_bridge.py     . \
-    && cp /tmp/src/kivy_stub.py         . \
-    && cp /tmp/src/scan_nigerian        . \
-    && cp -r /tmp/src/data              . \
-    && rm -rf /tmp/k.zip /tmp/src
-
-RUN chmod +x ./scan_nigerian ./kentro_server
-
-# Data directory for SQLite (persisted across restarts on HF Spaces)
-RUN mkdir -p /data && chmod 777 /data
-
-RUN useradd -u 1000 -m kentro && chown -R kentro:kentro /app /data
-USER 1000
-
-ENV PORT=7860 \
-    DB_PATH=/data/kentro.db \
-    STATIC_DIR=/app/frontend/dist \
-    PYTHONUNBUFFERED=1 \
-    PYTHONDONTWRITEBYTECODE=1
-# REDIS_URL is injected at runtime from HF Space secret — never hardcoded here.
-# If not set, the app runs fine in single-node mode (AI moves via direct callback).
-
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates && rm -rf /var/lib/apt/lists/*
+
+RUN pip install --no-cache-dir --quiet \
+    flask flask-socketio eventlet
+
+COPY --from=backend-builder /build/server ./server
+COPY --from=frontend-builder /build/dist ./frontend/dist
+COPY --from=unpacker /src/engine_bridge.py .
+COPY --from=unpacker /src/nigerian_draughts.py .
+COPY --from=unpacker /src/kivy_stub.py .
+COPY --from=unpacker /src/scan_nigerian ./scan_nigerian
+COPY --from=unpacker /src/scan.ini .
+COPY --from=unpacker /src/data/ ./data/
+
+RUN mkdir -p /data && \
+    useradd -r -s /bin/false appuser && \
+    chown -R appuser:appuser /app
+RUN chmod +x /app/scan_nigerian
+
+USER appuser
 EXPOSE 7860
 
-HEALTHCHECK --interval=30s --timeout=5s --start-period=15s --retries=3 \
-    CMD wget -qO- http://localhost:7860/health || exit 1
+ENV PORT=7860 \
+    STATIC_DIR=/app/frontend/dist
 
-CMD ["./kentro_server"]
+CMD ["/app/server"]

kentro_src.zip

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:f37e0fc1a05e4bd18d2bf16e368bf7b223cb15ab37a62281c93faa448281b266
+size 6382680