FROM python:3.11-slim
RUN apt-get update && apt-get install -y curl && rm -rf /var/lib/apt/lists/*
RUN useradd -m -u 1000 user && mkdir -p /home/user/.local /home/user/app /tmp && chown -R user:user /home/user /tmp
USER user
ENV HOME=/home/user PATH=/home/user/.local/bin:$PATH
WORKDIR /home/user/app
COPY --chown=user requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt
COPY --chown=user app.py .
RUN chmod -R u+rw /home/user/app /tmp
EXPOSE 7860
CMD ["streamlit", "run", "app.py", "--server.headless=true", "--server.enableCORS=false", "--server.enableXsrfProtection=false", "--server.fileWatcherType=none", "--server.port=7860", "--server.address=0.0.0.0", "--server.maxUploadSize=200"]