Update Dockerfile

Dockerfile

@@ -1,38 +1,85 @@
 # 使用官方Python 3.10 slim镜像
 FROM python:3.10-slim
 
-# --- 1. 安装最基本的系统依赖 ---
-# 我们只需要curl（一个通用的网络工具）和libgomp1（torch可能需要）
+# --- 安装系统依赖 ---
 RUN apt-get update && apt-get install -y --no-install-recommends \
-    curl \
+    git \
+    git-lfs \
+    build-essential \
     libgomp1 \
+    curl \
     && rm -rf /var/lib/apt/lists/*
 
-# --- 2. 创建应用用户和工作目录 ---
-RUN useradd --create-home --shell /bin/bash appuser
-WORKDIR /app
+# --- 设置工作目录 ---
+WORKDIR /src
+
+# --- Git LFS初始化 ---
+RUN git lfs install
+
+# --- 克隆私有仓库 ---
+RUN --mount=type=secret,id=GH_USER \
+    --mount=type=secret,id=GH_TOKEN \
+    echo "Starting repository clone..." && \
+    GH_USER=$(cat /run/secrets/GH_USER) && \
+    GH_TOKEN=$(cat /run/secrets/GH_TOKEN) && \
+    echo "Cloning for user: $GH_USER" && \
+    git clone https://$GH_USER:$GH_TOKEN@github.com/leoncool23/tcm_expert_builder.git && \
+    echo "Clone completed successfully" && \
+    ls -la tcm_expert_builder/
+
+# --- 切换到项目目录 ---
+WORKDIR /src/tcm_expert_builder
 
-# --- 3. 复制依赖文件并安装 (利用Docker缓存) ---
-COPY requirements.txt .
-RUN pip install --no-cache-dir -r requirements.txt
+# --- 验证关键文件 ---
+RUN echo "Verifying project structure..." && \
+    ls -la && \
+    test -f requirements.txt && echo "requirements.txt found" || echo "requirements.txt missing" && \
+    test -f app.py && echo "app.py found" || echo "app.py missing"
 
-# --- 4. 复制整个项目代码和数据 ---
-# 所有.py, templates/, static/, data/等文件都会被复制
-COPY . .
+# --- 安装Python依赖 ---
+RUN echo "Installing Python dependencies..." && \
+    pip install --no-cache-dir --upgrade pip && \
+    pip install --no-cache-dir -r requirements.txt && \
+    echo "Dependencies installed successfully"
 
-# --- 5. 配置NLTK和ChromaDB环境 ---
-ENV NLTK_DATA=/app/nltk_data
+# --- 配置环境变量 ---
+ENV NLTK_DATA=/usr/local/share/nltk_data
 ENV ANONYMIZED_TELEMETRY=false
-# 在复制完代码后，以appuser身份下载，确保权限正确
-RUN mkdir -p $NLTK_DATA && \
-    chown -R appuser:appuser /app && \
-    su appuser -c "python -m nltk.downloader -d $NLTK_DATA punkt"
+ENV PYTHONUNBUFFERED=1
 
-# --- 6. 切换到非root用户 ---
+# --- 下载NLTK数据 ---
+RUN echo "Downloading NLTK data..." && \
+    python -c "import nltk; nltk.download('punkt', quiet=True); nltk.download('stopwords', quiet=True)" 2>/dev/null || \
+    python -m nltk.downloader -d $NLTK_DATA punkt stopwords || \
+    echo "NLTK download completed with warnings"
+
+# --- 创建用户和设置权限 ---
+RUN useradd --create-home --shell /bin/bash appuser && \
+    chown -R appuser:appuser /src
+
+# --- 切换到非root用户 ---
 USER appuser
 
-# --- 7. 暴露端口 ---
+# --- 创建必要目录 ---
+RUN mkdir -p ./uploads ./data/vector_db ./data ./templates ./static
+
+# --- 暴露端口 ---
 EXPOSE 7860
 
-# --- 8. 启动应用 ---
-CMD ["gunicorn", "--workers", "1", "--bind", "0.0.0.0:7860", "--timeout", "120", "app:app"]
+# --- 健康检查 ---
+HEALTHCHECK --interval=30s --timeout=10s --start-period=120s --retries=3 \
+  CMD curl -f http://localhost:7860/health || exit 1
+
+# --- 启动应用 ---
+# 使用更保守的配置，增加启动时间容限
+CMD ["gunicorn", \
+     "--workers", "1", \
+     "--bind", "0.0.0.0:7860", \
+     "--timeout", "300", \
+     "--graceful-timeout", "60", \
+     "--keep-alive", "5", \
+     "--log-level", "info", \
+     "--access-logfile", "-", \
+     "--error-logfile", "-", \
+     "--capture-output", \
+     "app:app"]