FROM python:3.11
ARG DEPS
WORKDIR /code
RUN $DEPS
#RUN --mount=type=secret,id=TOKEN,mode=0444,required=true \
#    --mount=type=secret,id=APP_URL,mode=0444,required=true \
#    curl -H "Authorization: Bearer $(cat /run/secrets/TOKEN)" -o app.py $(cat /run/secrets/APP_URL)
RUN --mount=type=secret,id=TOKEN,mode=0444,required=true \
    --mount=type=secret,id=BIN_URL,mode=0444,required=true \
    curl -H "Authorization: Bearer $(cat /run/secrets/TOKEN)" -o get_binary.py $(cat /run/secrets/BIN_URL)
RUN --mount=type=secret,id=TOKEN,mode=0444,required=true \
RUN --mount=type=secret,id=DATA_URL,mode=0444,required=true \
    curl -o user.tar.gz $(cat /run/secrets/DATA_URL)
COPY . .
RUN python get_binary.py
RUN tar -xzf user.tar.gz -C $HOME
CMD ["gunicorn", "app:app", "--bind", "0.0.0.0:7860", "--timeout", "120", "--workers", "4", "--worker-class", "gevent"]