# Use Python 3.11 as base image FROM python:3.11-slim # Set working directory WORKDIR /code # Install system dependencies RUN apt-get update && apt-get install -y \ build-essential \ curl \ git \ && rm -rf /var/lib/apt/lists/* # Copy requirements first for better caching COPY ./requirements.txt /code/requirements.txt # Install Python dependencies RUN pip install --no-cache-dir -U -r /code/requirements.txt # Create a non-root user first RUN useradd -m -u 1000 user # Switch to non-root user USER user # Set home to the user's home directory ENV HOME=/home/user \ PATH=/home/user/.local/bin:$PATH # Set the working directory to the user's home directory WORKDIR $HOME/app # Copy the current directory contents into the container at $HOME/app setting the owner to the user COPY --chown=user . $HOME/app # Expose port EXPOSE 7860 # Health check HEALTHCHECK CMD curl --fail http://localhost:7860/ || exit 1 # Run the application CMD ["python", "app.py"]