Dockerfile

FROM vaultwarden/server:latest

RUN apt-get update && \
    apt-get install -y python3 python3-venv python3-pip curl && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/*

COPY --from=cloudflare/cloudflared:latest /usr/local/bin/cloudflared /usr/local/bin/cloudflared
RUN chmod +x /usr/local/bin/cloudflared

RUN mkdir -p /data && \
    chown -R 1000:1000 /data && \
    chmod -R 700 /data

ENV VIRTUAL_ENV=/opt/venv
RUN python3 -m venv $VIRTUAL_ENV
ENV PATH="$VIRTUAL_ENV/bin:$PATH"
RUN pip install --no-cache-dir huggingface_hub

ENV ROCKET_ADDRESS=0.0.0.0
ENV ROCKET_PORT=7860
ENV CF_TOKEN=your_token

COPY sync_data.sh /
RUN chmod +x /sync_data.sh

EXPOSE 7860

USER 1000:1000

CMD cloudflared tunnel --no-autoupdate run --token $CF_TOKEN & \
    /sync_data.sh