# Hugging Face Spaces 优化版 Dockerfile
FROM voapi/voapi:latest

# 创建应用用户和组
RUN addgroup -g 1000 appuser && \
    adduser -u 1000 -G appuser -s /bin/sh -D appuser

# 创建目录并设置权限
RUN mkdir -p /tmp/veloera/logs /tmp/veloera/data /home/appuser && \
    chown -R appuser:appuser /tmp/veloera /home/appuser && \
    chmod -R 755 /tmp/veloera /home/appuser

# 设置工作目录
WORKDIR /home/appuser

# 环境变量配置
ENV PORT=3000
ENV TZ=Asia/Shanghai
ENV LOG_DIR=/tmp/veloera/logs
ENV DATA_DIR=/tmp/veloera/data
ENV SQLITE_PATH=/tmp/veloera/data/veloera.db

# 切换到非root用户
USER appuser

# 暴露端口
EXPOSE 3000

# 健康检查
HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
    CMD wget --no-verbose --tries=1 --spider http://localhost:7860/api/status || exit 1

# 启动命令
CMD ["/veloera", "--port", "3000", "--log-dir", "/tmp/veloera/logs"]