Upload Dockerfile.txt

Dockerfile.txt

@@ -0,0 +1,103 @@
+# Stage 1: Build React frontend
+FROM node:20-slim AS frontend-builder
+
+WORKDIR /app/frontend
+
+# Copy package files
+COPY package*.json ./
+
+# Install dependencies
+RUN npm ci
+
+# Copy source files
+COPY . .
+
+# Build the React app
+RUN npm run build
+
+# Stage 2: Python backend + serve frontend
+FROM python:3.12-slim-trixie
+
+# Copy uv from the official distroless image (recommended approach)
+COPY --from=ghcr.io/astral-sh/uv:0.9.15 /uv /uvx /bin/
+
+# Install system dependencies for Playwright and nginx
+RUN apt-get update && apt-get install -y \
+    nginx \
+    supervisor \
+    libnss3 \
+    libnspr4 \
+    libatk1.0-0 \
+    libatk-bridge2.0-0 \
+    libcups2 \
+    libdrm2 \
+    libxkbcommon0 \
+    libxcomposite1 \
+    libxdamage1 \
+    libxfixes3 \
+    libxrandr2 \
+    libgbm1 \
+    libasound2 \
+    libpango-1.0-0 \
+    libpangocairo-1.0-0 \
+    libcairo2 \
+    libatspi2.0-0 \
+    xvfb \
+    fonts-liberation \
+    libappindicator3-1 \
+    libu2f-udev \
+    libvulkan1 \
+    wget \
+    && rm -rf /var/lib/apt/lists/*
+
+# Create a new user named "user" with user ID 1000 (required for HF Spaces)
+RUN useradd -m -u 1000 user
+
+# Create necessary directories with proper permissions for nginx (before switching user)
+RUN mkdir -p /var/log/nginx /var/lib/nginx /var/cache/nginx /run \
+    && chown -R user:user /var/log/nginx /var/lib/nginx /var/cache/nginx /run \
+    && chmod -R 755 /var/log/nginx /var/lib/nginx /var/cache/nginx /run
+
+# Configure nginx (needs root for /etc/nginx)
+COPY nginx.conf /etc/nginx/nginx.conf
+
+# Configure supervisor
+COPY supervisord.conf /etc/supervisor/conf.d/supervisord.conf
+
+# Allow user to run supervisor
+RUN chown -R user:user /etc/supervisor
+
+# Switch to the "user" user
+USER user
+
+# Set home to the user's home directory
+ENV HOME=/home/user \
+    PATH=/home/user/.local/bin:$PATH
+
+# Set the working directory to the user's home directory
+WORKDIR $HOME/app
+
+# Copy backend code and sync with locked dependencies
+COPY --chown=user:user backend/ ./backend/
+RUN cd backend && uv sync
+
+# Copy FARA source
+COPY --chown=user:user fara/ ./fara/
+
+# Activate the virtual environment by adding it to PATH
+ENV PATH="$HOME/app/backend/.venv/bin:$PATH"
+
+# Install Playwright browsers
+RUN playwright install chromium
+
+# Copy built frontend from Stage 1
+COPY --chown=user:user --from=frontend-builder /app/frontend/dist ./static
+
+# Expose port
+EXPOSE 7860
+
+# Set environment variables
+ENV PYTHONUNBUFFERED=1
+
+# Start supervisor (manages nginx + python backend)
+CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/conf.d/supervisord.conf"]