Dockerfile

FROM python:3.11-slim

# Set environment variables
ENV PYTHONDONTWRITEBYTECODE=1
ENV PYTHONUNBUFFERED=1

# Create a non-root user (required by Hugging Face Spaces)
RUN useradd -m -u 1000 user
ENV HOME=/home/user
ENV PATH="/home/user/.local/bin:$PATH"

# Install system dependencies
RUN apt-get update && apt-get install -y --no-install-recommends \
    build-essential \
    && rm -rf /var/lib/apt/lists/*

# Set working directory and ensure user owns it
WORKDIR /home/user/app
RUN chown -R user:user /home/user/app

# Create directories needed at runtime (while still root)
RUN mkdir -p experience_logs && chown -R user:user experience_logs

# Copy requirements first for better layer caching
COPY --chown=user:user requirements.txt .

# Switch to non-root user
USER user

# Install Python dependencies (CPU-only PyTorch to keep image small)
RUN pip install --no-cache-dir --upgrade pip && \
    pip install --no-cache-dir torch --index-url https://download.pytorch.org/whl/cpu && \
    pip install --no-cache-dir -r requirements.txt

# Copy application code and model files
COPY --chown=user:user heal.py .
COPY --chown=user:user models/ ./models/


# Expose the Hugging Face Spaces default port
EXPOSE 7860



# Run with gunicorn for production
CMD ["gunicorn", "--bind", "0.0.0.0:7860", "--workers", "1", "--timeout", "120", "heal:app"]