FROM python:3.9

# System deps
RUN apt-get update && apt-get install -y \
    git \
    make \
    g++ \
    zip \
    unzip \
    curl \
    pkg-config \
    libssl-dev \
    && rm -rf /var/lib/apt/lists/*

# Build zsign
RUN git clone --depth 1 https://github.com/zhlynn/zsign.git /opt/zsign && \
    cd /opt/zsign/build/linux && \
    make && \
    cp /opt/zsign/bin/zsign /usr/local/bin/zsign

# App setup
WORKDIR /app
COPY . .

RUN pip install --no-cache-dir flask flask-cors gunicorn

# IMPORTANT: HF expects port 7860
CMD ["gunicorn", "-b", "0.0.0.0:7860", "--workers", "1", "--timeout", "600", "app:app"]