Dockerfile

# Gunakan image python standar tanpa slim agar dependensi sistem sudah lengkap
FROM python:3.10

WORKDIR /app

# Set env agar log python langsung keluar
ENV PYTHONUNBUFFERED=1

# Buat user non-root sesuai aturan HF
RUN useradd -m -u 1000 user
USER user
ENV PATH="/home/user/.local/bin:${PATH}"

# Copy requirements & install
COPY --chown=user:user requirements.txt .
RUN pip install --no-cache-dir --user --upgrade pip && \
    pip install --no-cache-dir --user -r requirements.txt

# Copy sisa kode
COPY --chown=user:user . .

EXPOSE 7860

CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]