Update Dockerfile

Dockerfile

@@ -1,12 +1,31 @@
 FROM stephengpope/no-code-architects-toolkit:latest
 
-# Set required environment variables
-ENV API_KEY=beast@5707
-ENV LOCAL_STORAGE_PATH=/tmp
+# Set non-sensitive environment variables
+ENV MAX_QUEUE_LENGTH=10 \
+    GUNICORN_WORKERS=4 \
+    GUNICORN_TIMEOUT=300
 
-ENV MAX_QUEUE_LENGTH=10
-ENV GUNICORN_WORKERS=4
-ENV GUNICORN_TIMEOUT=300
+# Load secrets from Hugging Face Secrets using Docker mounts
+RUN --mount=type=secret,id=API_KEY,required=true \
+    export API_KEY=$(cat /run/secrets/API_KEY)
+RUN --mount=type=secret,id=S3_ENDPOINT_URL,required=true \
+    export S3_ENDPOINT_URL=$(cat /run/secrets/S3_ENDPOINT_URL)
+RUN --mount=type=secret,id=S3_ACCESS_KEY,required=true \
+    export S3_ACCESS_KEY=$(cat /run/secrets/S3_ACCESS_KEY)
+RUN --mount=type=secret,id=S3_SECRET_KEY,required=true \
+    export S3_SECRET_KEY=$(cat /run/secrets/S3_SECRET_KEY)
+RUN --mount=type=secret,id=S3_BUCKET_NAME,required=true \
+    export S3_BUCKET_NAME=$(cat /run/secrets/S3_BUCKET_NAME)
+RUN --mount=type=secret,id=S3_REGION,required=true \
+    export S3_REGION=$(cat /run/secrets/S3_REGION)
+
+# Re-export as ENV so the Python app can access them
+ENV API_KEY=$API_KEY \
+    S3_ENDPOINT_URL=$S3_ENDPOINT_URL \
+    S3_ACCESS_KEY=$S3_ACCESS_KEY \
+    S3_SECRET_KEY=$S3_SECRET_KEY \
+    S3_BUCKET_NAME=$S3_BUCKET_NAME \
+    S3_REGION=$S3_REGION
 
 EXPOSE 8080