Update Dockerfile

Dockerfile

@@ -1,37 +1,53 @@
-# Use Python 3.9 slim base image for smaller footprint
+# Use Python 3.9 slim-buster for stability and smaller footprint
+FROM python:3.9-slim-buster as builder
 
-FROM python:3.9-slim
+# Install system dependencies
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends \
+    gcc \
+    python3-dev \
+    libssl-dev \
+    && rm -rf /var/lib/apt/lists/*
 
-# Set working directory
+# Create and activate virtual environment
+RUN python -m venv /opt/venv
+ENV PATH="/opt/venv/bin:$PATH"
 
-WORKDIR /app
+# Install Python dependencies
+COPY requirements.txt .
+RUN pip install --no-cache-dir -r requirements.txt
 
-# Install system dependencies required for Python packages (e.g., firebase-admin, gcc for compilation)
+# ========== Runtime Stage ========== #
+FROM python:3.9-slim-buster
 
+# Install runtime dependencies
 RUN apt-get update && \
-apt-get install -y --no-install-recommends \
-gcc \
-python3-dev \
-libssl-dev \
-libc-dev && \
-rm -rf /var/lib/apt/lists/\*
-
-# Copy requirements.txt first to leverage Docker cache
-
-COPY requirements.txt . RUN pip install --no-cache-dir -r requirements.txt
+    apt-get install -y --no-install-recommends \
+    libssl1.1 \
+    && rm -rf /var/lib/apt/lists/*
 
-# Copy the entire application code
+# Copy virtual environment from builder
+COPY --from=builder /opt/venv /opt/venv
+ENV PATH="/opt/venv/bin:$PATH"
 
-COPY . .
+# Create non-root user
+RUN useradd -m -u 1001 krishna
+USER krishna
+WORKDIR /home/krishna/app
 
-# Set environment variables
+# Copy application code (with proper ownership)
+COPY --chown=krishna:krishna . .
 
-ENV PORT=7860 PYTHONUNBUFFERED=1
-
-# Expose the port
+# Environment variables
+ENV PORT=7860 \
+    PYTHONUNBUFFERED=1 \
+    PYTHONPATH=/home/krishna/app \
+    GUNICORN_CMD_ARGS="--bind=0.0.0.0:7860 --workers=2 --threads=4 --timeout=120 --worker-class=gthread --log-level=info"
 
+# Expose port and health check
 EXPOSE 7860
+HEALTHCHECK --interval=30s --timeout=3s \
+    CMD curl -f http://localhost:7860/ || exit 1
 
-# Run Gunicorn with optimized settings
-
-CMD \["python", "-m", "gunicorn", "--bind", "0.0.0.0:7860", "--workers", "2", "--threads", "4", "--timeout", "120", "app:app"\]
+# Run Gunicorn
+CMD ["gunicorn", "app:app"]