FROM python:3.10

# Install system dependencies
RUN apt-get update && apt-get install -y \
    ffmpeg \
    libgl1 \
    libglib2.0-0 \
    && rm -rf /var/lib/apt/lists/*

# Create non-root user (HF best practice)
RUN useradd -m -u 1000 user
USER user

ENV PATH=/home/user/.local/bin:$PATH
WORKDIR /app

# Copy requirements first (better caching)
COPY --chown=user requirements.txt .

RUN pip install --no-cache-dir --upgrade pip \
 && pip install --no-cache-dir -r requirements.txt

# Copy project files
COPY --chown=user . .

# HuggingFace expects port 7860
EXPOSE 7860

# IMPORTANT: start FastAPI properly
CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]