Spaces:
Sleeping
Sleeping
| # Stage 1: Build stage (only used if compiling dependencies) | |
| FROM python:3.9-slim as build-stage | |
| # Set the working directory | |
| WORKDIR /app | |
| # Copy requirements file | |
| COPY requirements.txt . | |
| # Install Python dependencies | |
| RUN pip install --no-cache-dir -r requirements.txt | |
| # Stage 2: Final stage | |
| FROM python:3.9-slim | |
| # Set the working directory in the container | |
| WORKDIR /app | |
| # Copy the contents from the build stage (dependencies only) | |
| COPY --from=build-stage /usr/local/lib/python3.9/site-packages /usr/local/lib/python3.9/site-packages | |
| COPY --from=build-stage /usr/local/bin /usr/local/bin | |
| # Add non-root user and switch to it for better security | |
| RUN useradd -m flaskuser | |
| # Copy application code | |
| COPY . /app | |
| # Change ownership of /app to flaskuser after user is created | |
| RUN chown -R flaskuser:flaskuser /app | |
| # Remove pip cache and unnecessary files (optional) | |
| RUN apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* | |
| # Switch to the non-root user | |
| USER flaskuser | |
| # Expose the port your Flask app will run on | |
| EXPOSE 7860 | |
| # Run the Flask app using gunicorn with an infinite request timeout | |
| # CMD ["gunicorn", "--bind", "0.0.0.0:7860", "--timeout", "0", "app:app"] | |
| CMD ["gunicorn", "--bind", "0.0.0.0:7860", "--timeout", "0", "--access-logfile", "-", "--error-logfile", "-", "app:app"] | |