Dockerfile

FROM python:3.9

# Cria diretório de trabalho
WORKDIR /code

# Instala dependências
COPY requirements.txt /code/requirements.txt
RUN pip install --no-cache-dir --upgrade -r /code/requirements.txt

# Cria usuário não-root
RUN useradd -m -u 1000 user

# Permite escrita na pasta de cache do huggingface
RUN mkdir -p /home/user/.cache/huggingface && \
    chown -R user:user /home/user/.cache

USER user

ENV HOME=/home/user \
    PATH=/home/user/.local/bin:$PATH \
    HF_HOME=/home/user/.cache/huggingface

WORKDIR $HOME/app

COPY --chown=user . $HOME/app

CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]