Fix Space configuration and Docker deployment

.env

@@ -1,2 +0,0 @@
-# Your API key for authentication
-API_KEY=your-secret-api-key-here

.gitignore

@@ -0,0 +1,4 @@
+.env
+__pycache__/
+*.py[cod]
+.venv/

Dockerfile

@@ -0,0 +1,23 @@
+FROM python:3.11-slim
+
+ENV PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1 \
+    PORT=7860
+
+WORKDIR /app
+
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends \
+       ca-certificates \
+       libglib2.0-0 \
+       libgl1 \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY requirements.txt .
+RUN pip install --no-cache-dir --upgrade pip \
+    && pip install --no-cache-dir -r requirements.txt
+
+COPY app.py .
+
+EXPOSE 7860
+CMD ["python", "app.py"]

README.md

@@ -1,55 +1,44 @@
+---
+title: RemBG API
+emoji: 🖼️
+colorFrom: blue
+colorTo: green
+sdk: docker
+app_port: 7860
+pinned: false
+---
+
 # RemBG API Server
 
-This is a Flask-based API server that removes backgrounds from images using the rembg library.
+A Flask API that removes image backgrounds with `rembg`.
 
-## Setup
+## Endpoints
 
-1. Install the required packages:
-```bash
-pip install -r requirements.txt
+### Health check
+
+```text
+GET /health
 ```
 
-2. Configure the environment:
-- Copy `.env.example` to `.env`
-- Set your desired API key in the `.env` file
+### Remove a background
 
-3. Run the server:
-```bash
-python app.py
+```text
+POST /remove-bg
 ```
 
-## API Usage
+Required:
 
-### Remove Background
-- Endpoint: `POST /remove-bg`
-- Headers:
-  - `X-API-Key`: Your API key
-- Body: Form-data with an 'image' file
-- Returns: PNG image with background removed
+- Header: `X-API-Key`
+- Multipart form field: `image`
 
-### Health Check
-- Endpoint: `GET /health`
-- Returns: Health status of the server
+Example:
 
-## Example Usage with cURL
 ```bash
-curl -X POST -H "X-API-Key: your-api-key" -F "image=@path/to/your/image.jpg" http://localhost:5000/remove-bg -o output.png
+curl -X POST \
+  -H "X-API-Key: your-api-key" \
+  -F "image=@input.jpg" \
+  https://vinaynayak-rembg-api.hf.space/remove-bg \
+  -o removed_bg.png
 ```
 
-## Example Usage with Python
-```python
-import requests
-
-url = "http://localhost:5000/remove-bg"
-headers = {
-    "X-API-Key": "your-api-key"
-}
-
-with open("input.jpg", "rb") as f:
-    files = {"image": f}
-    response = requests.post(url, headers=headers, files=files)
-
-if response.status_code == 200:
-    with open("output.png", "wb") as f:
-        f.write(response.content)
-```
+Set `API_KEY` in the Hugging Face Space Settings → Secrets. Do not commit a `.env` file or any real API key.

app.py

@@ -1,63 +1,60 @@
-from flask import Flask, request, jsonify, send_file
-from rembg import remove
-from PIL import Image
+import hmac
 import io
 import os
+
 from dotenv import load_dotenv
+from flask import Flask, jsonify, request, send_file
+from PIL import Image
+from rembg import remove
 
-# Load environment variables
 load_dotenv()
 
 app = Flask(__name__)
+app.config["MAX_CONTENT_LENGTH"] = 16 * 1024 * 1024  # 16 MB
 
-# Get API key from environment variable
-API_KEY = os.getenv('API_KEY')
 
-def check_api_key():
-    api_key = request.headers.get('X-API-Key')
-    if not api_key or api_key != API_KEY:
-        return False
-    return True
+def check_api_key() -> bool:
+    supplied_key = request.headers.get("X-API-Key", "")
+    configured_key = os.getenv("API_KEY", "")
+    return bool(configured_key) and hmac.compare_digest(supplied_key, configured_key)
 
-@app.route('/remove-bg', methods=['POST'])
+
+@app.route("/remove-bg", methods=["POST"])
 def remove_background():
-    # Check API key
     if not check_api_key():
-        return jsonify({'error': 'Invalid or missing API key'}), 401
+        return jsonify({"error": "Invalid or missing API key"}), 401
+
+    if "image" not in request.files:
+        return jsonify({"error": "No image file provided"}), 400
 
-    if 'image' not in request.files:
-        return jsonify({'error': 'No image file provided'}), 400
-    
-    file = request.files['image']
-    
-    if file.filename == '':
-        return jsonify({'error': 'No selected file'}), 400
+    file = request.files["image"]
+    if not file.filename:
+        return jsonify({"error": "No selected file"}), 400
 
     try:
-        # Read the image
         input_image = Image.open(file.stream)
-        
-        # Remove background
-        output = remove(input_image)
-        
-        # Save to bytes
-        img_byte_arr = io.BytesIO()
-        output.save(img_byte_arr, format='PNG')
-        img_byte_arr.seek(0)
-        
+        output_image = remove(input_image)
+
+        output_bytes = io.BytesIO()
+        output_image.save(output_bytes, format="PNG")
+        output_bytes.seek(0)
+
         return send_file(
-            img_byte_arr,
-            mimetype='image/png',
+            output_bytes,
+            mimetype="image/png",
             as_attachment=True,
-            download_name='removed_bg.png'
+            download_name="removed_bg.png",
         )
+    except Exception as exc:
+        app.logger.exception("Background removal failed")
+        return jsonify({"error": str(exc)}), 500
 
-    except Exception as e:
-        return jsonify({'error': str(e)}), 500
 
-@app.route('/health', methods=['GET'])
+@app.route("/health", methods=["GET"])
 def health_check():
-    return jsonify({'status': 'healthy'}), 200
+    return jsonify({"status": "healthy"}), 200
+
 
-if __name__ == '__main__':
-    app.run(host='0.0.0.0', port=5000)
+if __name__ == "__main__":
+    port = int(os.getenv("PORT", "7860"))
+    app.run(host="0.0.0.0", port=port)

requirements.txt

@@ -1,7 +1,4 @@
-flask==2.0.1
-requests==2.26.0
-python-dotenv==0.19.0
-Pillow==8.3.1
-huggingface-hub==0.16.4
-transformers==4.30.2
-rembg==2.0.50
+Flask>=3.0,<4
+Pillow>=10,<12
+python-dotenv>=1,<2
+rembg[cpu]>=2.0.50,<3