# Use an official Python runtime as a parent image FROM python:3.11-slim # Create a non-root user RUN useradd -m -u 1000 user # Set the working directory in the container WORKDIR /app # Copy the current directory contents into the container at /app COPY --chown=user . /app # Install any needed packages specified in requirements.txt RUN pip install --no-cache-dir -r requirements.txt # Create instance directory and set permissions RUN mkdir -p instance && chown -R user:user instance # Switch to non-root user USER user # Make port 7860 available to the world outside this container EXPOSE 7860 # Define environment variable ENV FLASK_APP=app.py ENV PYTHONUNBUFFERED=1 ENV PATH="/home/user/.local/bin:$PATH" # Run app.py when the container launches CMD ["python", "app.py"]