FROM python:3.10-slim

# Install tools build-essential
RUN apt-get update && apt-get install -y \
    chromium \
    chromium-driver \
    libnss3 \
    libatk1.0-0 \
    libatk-bridge2.0-0 \
    libcups2 \
    libx11-xcb1 \
    libxcomposite1 \
    libxdamage1 \
    libxrandr2 \
    libgbm1 \
    libpango-1.0-0 \
    libpangocairo-1.0-0 \
    libgtk-3-0 \
    && rm -rf /var/lib/apt/lists/*


# Buat user non-root
RUN useradd -m -u 1000 user

# Set WORKDIR dan pastikan user punya akses
WORKDIR /app
RUN chown -R user:user /app

# Switch ke user non-root
USER user
ENV PATH="/home/user/.local/bin:$PATH"

# Copy requirements dan install
COPY requirements.txt .
RUN pip install --upgrade pip
RUN pip install --no-cache-dir --upgrade -r requirements.txt

# Copy source code
COPY --chown=user:user . /app

# Pastikan folder dokumen bisa dibuat tanpa error permission
RUN mkdir -p /app/documents

# Jalankan FastAPI
CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "7860"]