Dockerfile

# Use Python 3.9 slim image for a smaller footprint
FROM python:3.9-slim

# Set environment variables
ENV PYTHONDONTWRITEBYTECODE 1
ENV PYTHONUNBUFFERED 1

# Create a non-root user
RUN useradd -m -u 1000 user

# Set working directory
WORKDIR /app

# Install system dependencies
RUN apt-get update && apt-get install -y --no-install-recommends \
    gcc \
    && rm -rf /var/lib/apt/lists/*

# Copy requirements file
COPY --chown=user requirements.txt .

# Install Python dependencies
RUN pip install --no-cache-dir -r requirements.txt \
    && pip install --no-cache-dir gunicorn \
    && pip install --no-cache-dir --upgrade sentence_transformers \
    && pip install --no-cache-dir --upgrade langchain \
    && pip install --no-cache-dir -U langchain-community \
    && pip install --no-cache-dir -U langchain-huggingface \
    && pip install --no-cache-dir flask-cors

# Copy application code
COPY --chown=user . .

# Switch to non-root user
USER user

# Run the application
CMD ["gunicorn", "app:app", "-b", "0.0.0.0:7860", "--worker-class", "gevent", "--workers", "4", "--timeout", "120"]