Dockerfile

# Use Python 3.12 slim image as base
FROM python:3.12-slim

# Set environment variables
ENV PYTHONUNBUFFERED=1 \
    POETRY_VERSION=1.7.1 \
    POETRY_HOME="/opt/poetry" \
    POETRY_NO_INTERACTION=1 \
    GRADIO_SERVER_NAME=0.0.0.0 \
    GRADIO_SERVER_PORT=7860

# Set working directory
WORKDIR /app

# Create cache directories for Hugging Face and set permissions correctly
ENV HF_HOME=/app/.cache/huggingface
RUN mkdir -p /app/.cache/huggingface && \
    mkdir -p /app/.cache/torch && \
    mkdir -p /app/.cache/transformers

# Install system dependencies
RUN apt-get update && apt-get install -y \
    portaudio19-dev \
    python3-pip \
    gcc \
    git \
    curl \
    && rm -rf /var/lib/apt/lists/* \
    && apt-get clean

# Install poetry
RUN pip install poetry==${POETRY_VERSION} && \
    poetry config virtualenvs.create false

# Copy dependency files first
COPY pyproject.toml poetry.lock ./

# Install dependencies using the lock file
RUN poetry install --no-dev --no-interaction --no-ansi

# Create app user and group with specific UID/GID
RUN groupadd -r app --gid 1000 && \
    useradd -r -g app --uid 1000 --create-home app

# Set ownership of all cache directories
RUN chown -R app:app /app/.cache && \
    chmod -R 755 /app/.cache

# Before switching to non-root user, create and set permissions
RUN mkdir -p /home/app/.cache && \
    mkdir -p /home/app/.config/matplotlib && \
    chown -R app:app /home/app/.cache && \
    chown -R app:app /home/app/.config

# Set matplotlib config dir
ENV MPLCONFIGDIR=/home/app/.config/matplotlib

# Switch to non-root user
USER app

# Copy the rest of the application
COPY --chown=app:app . .

# Expose the port the app runs on
EXPOSE 7860

# Run the application
ENTRYPOINT ["python"]
CMD ["app.py"]