updated

Dockerfile

@@ -1,27 +1,25 @@
 FROM nginx:alpine
 
-WORKDIR /app
+# Remove the default configs that reference /var/cache/nginx
+RUN rm -f /etc/nginx/nginx.conf && rm -f /etc/nginx/conf.d/default.conf
 
+# Copy in your custom nginx.conf
+COPY nginx.conf /etc/nginx/nginx.conf
+
+# Create writable temp directories in /tmp
+RUN mkdir -p /tmp/client_temp \
+           /tmp/proxy_temp \
+           /tmp/fastcgi_temp \
+           /tmp/scgi_temp \
+           /tmp/uwsgi_temp
+
+# Copy the application files to the nginx html directory
 COPY index.html /usr/share/nginx/html/
 COPY styles.css /usr/share/nginx/html/
 COPY script.js /usr/share/nginx/html/
 
-# Create necessary writable temp directories in /tmp
-RUN mkdir -p /tmp/nginx/client_temp && \
-    chown -R nginx:nginx /tmp/nginx
-
-# Custom Nginx config using /tmp for temp files
-RUN echo $'server {\n\
-    listen 8080;\n\
-    server_name localhost;\n\
-    client_body_temp_path /tmp/nginx/client_temp;\n\
-    location / {\n\
-        root /usr/share/nginx/html;\n\
-        index index.html;\n\
-    }\n\
-}' > /etc/nginx/conf.d/default.conf
-
-USER nginx
+# Hugging Face Spaces typically expects the app on port 8080
 EXPOSE 8080
 
+# Start Nginx in the foreground
 CMD ["nginx", "-g", "daemon off;"]

README.md

@@ -81,12 +81,13 @@ This application can also be run using Docker, which ensures consistent behavior
 
 ### Deploying to Hugging Face Spaces
 
-This application is compatible with Hugging Face Spaces Docker deployments. The Docker configuration has been specifically adjusted to work in the Hugging Face Spaces environment:
+This application is compatible with Hugging Face Spaces Docker deployments. The Docker configuration has been specifically adjusted to work in the Hugging Face Spaces environment, which has stricter security and filesystem restrictions:
 
-1. The Nginx container runs as a non-root user to comply with security requirements
-2. The web server listens on port 8080 instead of the default 80
-3. Required directories are pre-created with appropriate permissions
-4. The configuration handles read-only filesystem restrictions
+1. **Custom nginx.conf**: We use a custom nginx configuration that redirects all temp directories to /tmp, which is writable in Hugging Face Spaces
+2. **Default Config Removal**: We remove the default nginx configuration files that reference /var/cache/nginx (which is read-only in Spaces)
+3. **Writable Temp Directories**: We create temp directories in /tmp with appropriate permissions
+4. **Port 8080**: The web server listens on port 8080 (the default port expected by Hugging Face Spaces)
+5. **Read-only Filesystem Handling**: The configuration properly handles read-only filesystem restrictions that are common in containerized environments
 
 To deploy to Hugging Face Spaces:
 

docker-compose.yml

@@ -9,8 +9,10 @@ services:
       - ./index.html:/usr/share/nginx/html/index.html
       - ./styles.css:/usr/share/nginx/html/styles.css
       - ./script.js:/usr/share/nginx/html/script.js
+      - ./nginx.conf:/etc/nginx/nginx.conf
     # Add read-only flag to prevent write attempts to read-only filesystem in HF Spaces
     read_only: false
     # Specific settings for Hugging Face Spaces or similar restricted environments
     environment:
-      - NGINX_ENTRYPOINT_QUIET_LOGS=1
+      - NGINX_ENTRYPOINT_QUIET_LOGS=1
+      - NGINX_WORKER_PROCESSES=1

nginx.conf

@@ -0,0 +1,40 @@
+worker_processes auto;
+
+error_log /dev/stderr warn;
+pid /tmp/nginx.pid;
+
+events {
+    worker_connections 1024;
+}
+
+http {
+    include       /etc/nginx/mime.types;
+    default_type  application/octet-stream;
+
+    # Use /tmp for all temp files (it's writable in Spaces)
+    client_body_temp_path /tmp/client_temp;
+    proxy_temp_path       /tmp/proxy_temp;
+    fastcgi_temp_path     /tmp/fastcgi_temp;
+    scgi_temp_path        /tmp/scgi_temp;
+    uwsgi_temp_path       /tmp/uwsgi_temp;
+
+    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+                      '$status $body_bytes_sent "$http_referer" '
+                      '"$http_user_agent" "$http_x_forwarded_for"';
+
+    access_log  /dev/stdout  main;
+
+    sendfile        on;
+    keepalive_timeout  65;
+
+    # Basic server block on port 8080
+    server {
+        listen 8080;
+        server_name localhost;
+
+        location / {
+            root   /usr/share/nginx/html;
+            index  index.html;
+        }
+    }
+}