| FROM python:3.10-slim | |
| # Create a non-root user | |
| RUN adduser --disabled-password --gecos '' appuser | |
| # Install dependencies | |
| RUN apt-get update && apt-get install -y gcc && \ | |
| pip install --no-cache-dir fastapi uvicorn transformers torch nltk && \ | |
| python -c "import nltk; nltk.download('punkt')" | |
| # Copy app and set permissions | |
| WORKDIR /home/appuser/app | |
| COPY --chown=appuser:appuser . . | |
| # Switch to non-root user | |
| USER appuser | |
| # Run the app | |
| CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "8080"] | |