Update Dockerfile

Dockerfile

@@ -1,23 +1,52 @@
-# Use an official Python base image
-FROM python:3.10-slim
+# Dockerfile
+
+# Stage 1: build dependencies and spaCy model
+FROM python:3.10-slim as builder
+
+ENV PYTHONUNBUFFERED=1 \
+    PYTHONDONTWRITEBYTECODE=1
+
+WORKDIR /app
 
-# Install system dependencies
 RUN apt-get update && \
-    apt-get install -y build-essential libglib2.0-0 libsm6 libxrender1 libxext6 && \
+    apt-get install -y --no-install-recommends \
+        build-essential \
+        libglib2.0-0 \
+        libsm6 \
+        libxrender1 \
+        libxext6 \
+        curl && \
     rm -rf /var/lib/apt/lists/*
 
-# Set workdir
+COPY requirements.txt .
+RUN pip install --upgrade pip && \
+    pip install --no-cache-dir -r requirements.txt && \
+    python -m spacy download en_core_web_sm
+
+# Stage 2: final slim image
+FROM python:3.10-slim
+
 WORKDIR /app
 
-# Copy your code
-COPY . /app
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends \
+        libglib2.0-0 \
+        libsm6 \
+        libxrender1 \
+        libxext6 \
+        curl && \
+    rm -rf /var/lib/apt/lists/*
+
+COPY --from=builder /usr/local/lib/python3.10/site-packages /usr/local/lib/python3.10/site-packages
+COPY --from=builder /usr/local/bin /usr/local/bin
+
+COPY . .
 
-# Install Python dependencies
-RUN pip install --no-cache-dir --upgrade pip
-RUN pip install --no-cache-dir -r requirements.txt
+RUN groupadd -r appuser && \
+    useradd -r -g appuser appuser && \
+    chown -R appuser:appuser /app
+USER appuser
 
-# Expose the port Streamlit uses
-EXPOSE 7860
+EXPOSE 8501
 
-# Command to run your app
-CMD ["streamlit", "run", "app.py", "--server.port=7860", "--server.address=0.0.0.0"]
+ENTRYPOINT ["streamlit", "run", "app.py", "--server.port=8501", "--server.address=0.0.0.0"]