# flock controller as an HF Docker Space (port 7860, persistent storage on /data).
# Space secrets: FLOCK_TOKEN, HF_TOKEN (jobs in the swarm namespace), and every
# secret named in specs (e.g. ANTHROPIC_API_KEY, OPENAI_API_KEY, MSGBOARD_INVITE_*).
FROM python:3.12-slim

RUN useradd -m -u 1000 user
WORKDIR /app
COPY pyproject.toml README.md* ./
COPY src ./src
RUN pip install --no-cache-dir ".[controller]"

ENV PORT=7860 \
    FLOCK_DATA=/data \
    PYTHONUNBUFFERED=1
RUN mkdir -p /data && chown user:user /data
USER user
EXPOSE 7860
CMD ["flock-controller"]