FROM python:3.12.1 WORKDIR /docker ADD . /docker COPY requirements.txt requirements.txt RUN pip install --upgrade pip RUN pip install --no-cache-dir -r requirements.txt COPY . . # Set up a new user named "user" with user ID 1000 RUN useradd -m -u 1000 user # Switch to the "user" user USER user # Set home to the user's home directory ENV HOME=/home/user \ PATH=/home/user/.local/bin:$PATH # Set the working directory to the user's home directory WORKDIR $HOME/app # Set the working directory to the user's home directory COPY --chown=user . $HOME/app EXPOSE 8501 HEALTHCHECK CMD --fail http://localhost:8501/_stcore/health # Get the secret key and clone it as repo at build time RUN --mount=type=secret,id=OPENAI_API_KEY,mode=0444,required=true \ git clone $(cat /run/secrets/OPENAI_API_KEY) ENTRYPOINT ["streamlit", "run", "app.py", "--server.port=8501", "--server.address=0.0.0.0"] # CMD [ "streamlit" , "run", "app.py"] # CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "7860"]