FROM python:3.10

# 1. Create a non‑root user
RUN useradd -m -u 1000 user

# 2. Pre-create .files with root, then chown to the user
WORKDIR /home/user/app
RUN mkdir -p /home/user/app/.files \
    && chown -R user:user /home/user/app/.files

# 3. Switch to non‑root user
USER user
ENV HOME=/home/user \
    PATH=/home/user/.local/bin:$PATH

# 4. Copy and install dependencies
COPY --chown=user requirements.txt $HOME/app/requirements.txt
RUN pip install --no-cache-dir -r $HOME/app/requirements.txt

# 5. Copy application code
COPY --chown=user . $HOME/app

# 6. Expose and run
EXPOSE 7860
CMD ["chainlit", "run", "app.py", "--host", "0.0.0.0", "--port", "7860"]