Dockerfile

FROM python:3.12-slim

ENV HOME=/home/user \
    PATH=/home/user/.local/bin:${PATH} \
    PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
    PIP_DISABLE_PIP_VERSION_CHECK=1 \
    PIP_NO_CACHE_DIR=1 \
    PYTHONPATH=/home/user/app/src \
    OPENAI_BASE_URL=https://api.openai.com/v1 \
    OPENAI_MODEL=gpt-5.4-mini \
    OPENAI_REASONING_EFFORT=low \
    OMP_NUM_THREADS=2 \
    OPENBLAS_NUM_THREADS=2

RUN groupadd --gid 1000 user \
    && useradd --create-home --uid 1000 --gid 1000 --shell /usr/sbin/nologin user

WORKDIR /home/user/app

COPY --chown=1000:1000 requirements-space.txt ./requirements-space.txt
RUN python -m pip install --no-cache-dir -r requirements-space.txt

COPY --chown=1000:1000 src ./src
COPY --chown=1000:1000 web ./web
RUN mkdir -p ./modules/pubtime/Data \
    && chown -R 1000:1000 ./modules

USER 1000:1000

EXPOSE 7860
STOPSIGNAL SIGTERM

HEALTHCHECK --interval=30s --timeout=3s --start-period=20s --retries=3 \
    CMD python -c "import urllib.request; urllib.request.urlopen('http://127.0.0.1:7860/healthz', timeout=2).read()"

CMD ["python", "src/server.py", "--host", "0.0.0.0", "--port", "7860"]