Create Dockerfile

Dockerfile

@@ -0,0 +1,56 @@
+FROM python:3.11-slim-bookworm
+
+ENV PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1 \
+    UV_HTTP_TIMEOUT=120 \
+    UV_HTTP_MAX_RETRIES=5 \
+    HF_HOME=/tmp/hf_cache \
+    TRANSFORMERS_CACHE=/tmp/hf_cache
+
+# Create a non-root user
+RUN addgroup --system appgroup && adduser --system --ingroup appgroup appuser
+
+WORKDIR /app
+
+# Install git + ssh utilities
+RUN apt-get update && apt-get install -y \
+    curl \
+    git \
+    openssh-client \
+    netcat-openbsd \
+ && rm -rf /var/lib/apt/lists/*
+
+COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
+
+COPY requirements.txt .
+
+RUN uv pip install --system --upgrade pip setuptools wheel
+RUN uv pip install --system torch==2.8.0+cpu --index-url https://download.pytorch.org/whl/cpu
+
+# Install other requirements
+RUN uv pip install --system -r requirements.txt
+
+# ========== PRIVATE GIT CLONE BLOCK ==========
+# ARG must match the HF secret name
+ARG GIT_PRIVATE_KEY
+
+# Configure SSH for GitHub
+RUN mkdir -p /root/.ssh && \
+    echo "$GIT_PRIVATE_KEY" > /root/.ssh/id_rsa && \
+    chmod 600 /root/.ssh/id_rsa && \
+    ssh-keyscan github.com >> /root/.ssh/known_hosts
+
+# Clone your private repo
+RUN git clone git@github.com:Sisyetad/problemsolution.git /app/private_repo
+# ============================================
+
+# Copy remaining app code
+COPY --chown=appuser:appgroup . .
+
+USER appuser
+
+RUN chmod +x /app/entrypoint.sh
+
+EXPOSE 8000
+
+CMD ["sh", "/app/entrypoint.sh"]