| # Hugging Face Spaces (Docker, free tier). CPU-only, ephemeral FS. | |
| FROM python:3.11-slim | |
| # System deps: ffmpeg (audio+frames), tesseract (OCR). Both free, local. | |
| RUN apt-get update && apt-get install -y --no-install-recommends \ | |
| ffmpeg \ | |
| tesseract-ocr \ | |
| && rm -rf /var/lib/apt/lists/* | |
| WORKDIR /app | |
| COPY pyproject.toml ./ | |
| RUN pip install --no-cache-dir . | |
| COPY app ./app | |
| ENV MEDIA_DIR=/data/downloads | |
| # DATABASE_URL is intentionally NOT set here — set it as an HF Space secret to the | |
| # Neon postgres URL (postgresql+asyncpg://...). Never hardcode it (holds a | |
| # password). Without the secret the app falls back to ephemeral local SQLite. | |
| RUN mkdir -p /data/downloads | |
| # HF Spaces expects the app on 7860. | |
| EXPOSE 7860 | |
| # --proxy-headers + trust the HF Spaces router so request.client.host is the real | |
| # client IP (not the proxy) — the per-IP card quota depends on it (M9). | |
| CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "7860", "--proxy-headers", "--forwarded-allow-ips", "*"] | |