sec

.gitignore

@@ -0,0 +1 @@
+env/

Dockerfile

@@ -1,14 +1,6 @@
 FROM python:3.9
 
-RUN useradd -m -u 1000 user
-USER user
-ENV PATH="/home/user/.local/bin:$PATH"
-
-WORKDIR /app
-
-COPY --chown=user ./requirements.txt requirements.txt
-RUN pip install --no-cache-dir --upgrade -r requirements.txt
-
+# Install system dependencies FIRST (as root)
 RUN apt-get update && apt-get install -y \
     wget \
     unzip \
@@ -17,6 +9,7 @@ RUN apt-get update && apt-get install -y \
     libomp5 \
     && rm -rf /var/lib/apt/lists/*
 
+# Install realesrgan-ncnn-vulkan (as root)
 RUN wget https://github.com/xinntao/Real-ESRGAN-ncnn-vulkan/releases/download/v0.2.0/realesrgan-ncnn-vulkan-v0.2.0-ubuntu.zip \
     && unzip realesrgan-ncnn-vulkan-v0.2.0-ubuntu.zip \
     && rm realesrgan-ncnn-vulkan-v0.2.0-ubuntu.zip \
@@ -24,10 +17,23 @@ RUN wget https://github.com/xinntao/Real-ESRGAN-ncnn-vulkan/releases/download/v0
     && chmod +x realesrgan-ncnn-vulkan/realesrgan-ncnn-vulkan \
     && mv realesrgan-ncnn-vulkan /usr/local/bin/ \
     && mkdir -p /usr/local/share/realesrgan-ncnn-vulkan/models \
-    && wget -O /usr/local/share/realesrgan-ncnn-vulkan/models/realesr-animevideov3.bin https://github.com/xinntao/Real-ESRGAN-ncnn-vulkan/releases/download/v0.2.0/realesr-animevideov3.bin \
-    && wget -O /usr/local/share/realesrgan-ncnn-vulkan/models/realesr-animevideov3.param https://github.com/xinntao/Real-ESRGAN-ncnn-vulkan/releases/download/v0.2.0/realesr-animevideov3.param \
+    && wget -O /usr/local/share/realesrgan-ncnn-vulkan/models/realesr-animevideov3.bin \
+       https://github.com/xinntao/Real-ESRGAN-ncnn-vulkan/releases/download/v0.2.0/realesr-animevideov3.bin \
+    && wget -O /usr/local/share/realesrgan-ncnn-vulkan/models/realesr-animevideov3.param \
+       https://github.com/xinntao/Real-ESRGAN-ncnn-vulkan/releases/download/v0.2.0/realesr-animevideov3.param
 
+# Create user AFTER system setup
+RUN useradd -m -u 1000 user
+USER user
+ENV PATH="/home/user/.local/bin:$PATH"
+
+WORKDIR /app
 
+# Copy and install Python dependencies (as user)
+COPY --chown=user ./requirements.txt requirements.txt
+RUN pip install --no-cache-dir --upgrade -r requirements.txt
 
+# Copy app code
 COPY --chown=user . /app
+
 CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]