FROM python:3.11-slim

# Create user to avoid running as root
RUN useradd -m -u 1000 user
USER user
ENV PATH="/home/user/.local/bin:${PATH}"

WORKDIR /app

COPY --chown=user . .
RUN pip install --no-cache-dir -r requirements.txt

# Port 7860 is mandatory for HF Spaces
EXPOSE 7860

CMD ["streamlit", "run", "app.py", "--server.port=7860", "--server.address=0.0.0.0"]