Dockerfile

# Use Python 3.9 slim image as the base
FROM python:3.9-slim

# Install necessary system dependencies
RUN apt-get update && apt-get install -y \
    libgl1-mesa-glx \
    libglib2.0-0 \
    wget \
    unzip \
    curl \
    ca-certificates \
    gnupg \
    fonts-liberation \
    libnss3 \
    libxss1 \
    libappindicator1 \
    libgbm-dev \
    libgtk-3-0 \
    gcc \
    libffi-dev \
    libxml2-dev \
    libxslt1-dev \
    libjpeg-dev \
    zlib1g-dev \
    && rm -rf /var/lib/apt/lists/*

# Set the working directory
WORKDIR /code

# Create necessary directories
RUN mkdir -p /code/uploads /code/chroma_db

# Add and use a non-root user
RUN useradd -ms /bin/sh myuser

# Set ownership and permissions
RUN chown -R myuser:myuser /code && \
    chmod -R 755 /code/chroma_db && \
    chmod -R 775 /code/uploads

# Switch to non-root user
USER myuser

# Copy and install Python dependencies
COPY --chown=myuser:myuser ./requirements.txt /code/requirements.txt
RUN pip install --no-cache-dir --upgrade -r /code/requirements.txt

# Copy the application code
COPY --chown=myuser:myuser . /code

# Default command to run the application
CMD ["python", "app.py"]