FROM python:3.9-slim WORKDIR /app COPY . . RUN pip install --no-cache-dir -r requirements.txt RUN mkdir -p static/uploads static/audio && \ touch feedback.json && \ chmod -R 777 static && \ chmod 666 feedback.json RUN adduser --disabled-password --gecos '' appuser USER appuser CMD ["gunicorn", "--bind", "0.0.0.0:7860", "app:app"]