FROM python:3.11-slim

ENV PYTHONDONTWRITEBYTECODE=1
ENV PYTHONUNBUFFERED=1

WORKDIR /app

RUN apt-get update && apt-get install -y \
    nginx \
    curl \
    ca-certificates \
    bash \
    zstd \
    && rm -rf /var/lib/apt/lists/*


# Install Ollama
RUN curl -fsSL https://ollama.com/install.sh | sh

COPY requirements.txt /app/
RUN pip install --no-cache-dir -r requirements.txt
RUN pip install --no-cache-dir open-webui

COPY . /app
COPY nginx.conf /etc/nginx/nginx.conf

RUN chmod +x /app/start.sh

# Open WebUI auth + trusted-header setup
ENV WEBUI_AUTH=True
ENV ENABLE_SIGNUP=False
ENV WEBUI_AUTH_TRUSTED_EMAIL_HEADER=X-User-Email
ENV WEBUI_AUTH_TRUSTED_NAME_HEADER=X-User-Name
ENV DEFAULT_USER_ROLE=user
ENV WEBUI_SECRET_KEY=9f3c6b2e8d1a4f7c5e9b0d2a6c8f1e3b7d4a9c6e2f8b1d0c5a7e3f9b2c6d8a1
ENV ADMIN_BOOTSTRAP_TOKEN=11BGSJJVQ0WTNYwyjJK538_woa9FJKOHfBrwqGwzQb7YdyiD8qM1uAPcYwrfPc6mGiX6SYMJ6KOEzo7oKc
ENV BYPASS_MODEL_ACCESS_CONTROL=true

# Open WebUI -> Ollama
ENV OLLAMA_BASE_URL=http://127.0.0.1:11434

EXPOSE 7860

CMD ["/app/start.sh"]