first commit

Dockerfile

@@ -0,0 +1,42 @@
+# Stage 1: Builder
+FROM python:3.11 as builder
+WORKDIR /opt/venv
+
+# Create a virtual environment and install dependencies
+COPY requirements.txt .
+RUN python -m venv . && . /opt/venv/bin/activate && pip install --no-cache-dir -r requirements.txt
+
+# Stage 2: Runner (The final image)
+FROM python:3.11-slim
+
+# Install system dependencies needed at runtime
+# ffmpeg is required for audio conversion
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    ffmpeg \
+    && rm -rf /var/lib/apt/lists/*
+
+# Create an unprivileged user
+RUN useradd --create-home --shell /bin/bash appuser
+
+# Set working directory for the application code
+WORKDIR /home/appuser
+
+# Copy the virtual environment from the builder stage
+COPY --from=builder /opt/venv /opt/venv
+
+# Copy the application code into the container
+COPY app/ ./app
+
+# Set the PATH to include the virtual environment's bin directory
+ENV PATH="/opt/venv/bin:$PATH"
+
+# Expose the application port
+EXPOSE 8000
+
+# Run as the unprivileged user
+USER appuser
+
+# Command to run the application using gunicorn for production
+CMD ["gunicorn", "-k", "uvicorn.workers.UvicornWorker", "-w", "2", "-b", "0.0.0.0:8000", "app.main:app"]
+
+