Nginx Changes

Dockerfile

@@ -1,7 +1,7 @@
 FROM python:3.11
 
 # Create and use a non-root user
-RUN useradd -ms /bin/bash admin
+RUN useradd -ms /bin/bash appuser
 
 # Set working directory for the application
 WORKDIR /app
@@ -21,14 +21,34 @@ RUN pip3 install --no-cache-dir --upgrade -r requirements.txt
 # Copy the rest of the application code after installing dependencies for better cache
 COPY . /app
 
+FROM nginx:alpine
+
+COPY --from=builder /app /app
+
+COPY nginx.conf /etc/nginx/conf.d/default.conf
+
+# Create a non-root user and group
+RUN addgroup -S appgroup && adduser -S appuser -G appgroup
+
+WORKDIR /app
+
+RUN chown -R appuser:appgroup /app
+
+USER appuser
+
+EXPOSE 7860
+
+# Start Nginx and the AIOHTTP app
+CMD ["sh", "-c", "python -u -m FileStream & nginx -g 'daemon off;'"]
+
 # Set ownership and permissions for the app directory
-RUN chown -R admin:admin /app && chmod -R 777 /app
+#RUN chown -R admin:admin /app && chmod -R 777 /app
 
 # Switch to the non-root user for better security
-USER admin
+#USER admin
 
 # Expose the port the application will run on
-EXPOSE 7860
+#EXPOSE 7860
 
 # Command to run the application
-CMD ["python", "-u", "-m", "FileStream"]
+#CMD ["python", "-u", "-m", "FileStream"]

Dockerfile copy

@@ -0,0 +1,34 @@
+FROM python:3.11
+
+# Create and use a non-root user
+RUN useradd -ms /bin/bash admin
+
+# Set working directory for the application
+WORKDIR /app
+
+# Copy only the necessary files first for better cache utilization
+COPY requirements.txt /app/requirements.txt
+
+# Install system dependencies and clean up in a single RUN step to reduce layers
+RUN apt-get update -y && apt-get upgrade -y \
+    && apt-get install -y \
+    && apt-get clean \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install Python dependencies from the requirements file
+RUN pip3 install --no-cache-dir --upgrade -r requirements.txt
+
+# Copy the rest of the application code after installing dependencies for better cache
+COPY . /app
+
+# Set ownership and permissions for the app directory
+RUN chown -R admin:admin /app && chmod -R 777 /app
+
+# Switch to the non-root user for better security
+USER admin
+
+# Expose the port the application will run on
+EXPOSE 7860
+
+# Command to run the application
+CMD ["python", "-u", "-m", "FileStream"]

FileStream/__main__.py

@@ -56,7 +56,7 @@ async def start_services():
 
     print("--------------------- Initializing Web Server ---------------------")
     await server.setup()  # Setup the web server
-    await web.TCPSite(server, Server.BIND_ADDRESS, Server.PORT).start()
+    await web.TCPSite(server, Server.BIND_ADDRESS, Server.APP_PORT).start()
     print("------------------------------ DONE ------------------------------\n\n")
 
     # Start the background task to clear inactive clients after web server setup

FileStream/config.py

@@ -42,6 +42,7 @@ class TMDB:
   
 class Server:
   PORT = int(env.get("PORT", 7860))
+  APP_PORT= int(env.get("APP_PORT", 8080))
   BIND_ADDRESS = str(env.get("BIND_ADDRESS", "0.0.0.0"))
   PING_INTERVAL = int(env.get("PING_INTERVAL", "1200"))
   HAS_SSL = str(env.get("HAS_SSL","0").lower()) in ("1", "true", "t","yes", "y")

ngnix.conf

@@ -0,0 +1,20 @@
+server {
+    listen 7860;
+
+    proxy_buffering off;
+    proxy_cache off;
+    sendfile on;
+    tcp_nopush on;
+    tcp_nodelay on;
+
+    location / {
+        proxy_pass http://127.0.0.1:8080; # Important: Use port 8080 for AIOHTTP
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header Range $http_range;
+        proxy_set_header If-Range $http_if_range;
+
+        add_header Accept-Ranges bytes;
+    }
+}