# Multi-stage build for optimized image size FROM python:3.11-slim as builder # Set working directory WORKDIR /app # Install build dependencies RUN apt-get update && apt-get install -y --no-install-recommends \ build-essential \ && rm -rf /var/lib/apt/lists/* # Copy requirements COPY requirements.txt . COPY pyproject.toml . COPY README.md . # Install Python dependencies RUN pip install --no-cache-dir --upgrade pip && \ pip install --no-cache-dir -r requirements.txt # Production stage FROM python:3.11-slim # Set environment variables ENV PYTHONUNBUFFERED=1 \ PYTHONDONTWRITEBYTECODE=1 \ PIP_NO_CACHE_DIR=1 \ PIP_DISABLE_PIP_VERSION_CHECK=1 # Create non-root user RUN useradd -m -u 1000 appuser && \ mkdir -p /app /app/logs /app/models && \ chown -R appuser:appuser /app WORKDIR /app # Copy Python dependencies from builder COPY --from=builder /usr/local/lib/python3.11/site-packages /usr/local/lib/python3.11/site-packages COPY --from=builder /usr/local/bin /usr/local/bin # Copy application code COPY --chown=appuser:appuser . . # Switch to non-root user USER appuser # Expose ports EXPOSE 7860 8000 # Health check HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \ CMD python -c "import requests; requests.get('http://localhost:7860')" || exit 1 # Set Python path ENV PYTHONPATH=/app/src:$PYTHONPATH # Run application CMD ["python", "-m", "writing_studio.main"]