Update Dockerfile

Dockerfile

@@ -1,10 +1,9 @@
+# syntax=docker/dockerfile:1.4
 FROM ubuntu:24.04
 
-# Build argument for your HF token (not persisted at runtime)
-ARG HF_TOKEN
-ENV HF_TOKEN=${HF_TOKEN}
 ENV DEBIAN_FRONTEND=noninteractive
 
+# Install essentials
 RUN apt-get update && \
     apt-get install -y python3 python3-venv python3-pip git wget && \
     rm -rf /var/lib/apt/lists/*
@@ -15,22 +14,22 @@ WORKDIR /workspace
 RUN git clone https://github.com/comfyanonymous/ComfyUI.git
 WORKDIR /workspace/ComfyUI
 
-# Setup virtual environment
+# Setup Python venv
 RUN python3 -m venv .venv && \
     . .venv/bin/activate && \
     pip install --upgrade pip && \
     pip install xformers!=0.0.18 && \
     pip install -r requirements.txt
 
-# Authenticate and download model files
-RUN mkdir -p models/unet models/vae && \
-    wget --header="Authorization: Bearer ${HF_TOKEN}" \
+# Download Flux.1 Schnell (UNET + VAE) using secret token
+RUN --mount=type=secret,id=hf_token \
+    mkdir -p models/unet models/vae && \
+    wget --header="Authorization: Bearer $(cat /run/secrets/hf_token)" \
       https://huggingface.co/black-forest-labs/FLUX.1-schnell/resolve/main/flux1-schnell.safetensors \
       -O models/unet/flux1-schnell.safetensors && \
-    wget --header="Authorization: Bearer ${HF_TOKEN}" \
+    wget --header="Authorization: Bearer $(cat /run/secrets/hf_token)" \
       https://huggingface.co/black-forest-labs/FLUX.1-schnell/resolve/main/ae.safetensors \
       -O models/vae/ae.safetensors
-    # per Hugging Face guidance: use Bearer headers to download gated/private files :contentReference[oaicite:1]{index=1}
 
 EXPOSE 7860