Update Dockerfile

Dockerfile

@@ -4,14 +4,11 @@
 FROM python:3.10-slim AS builder
 
 # Install build dependencies
-RUN apt-get update && apt-get install -y --no-install-recommends \
+RUN apt-get update && apt-get install -y \
     build-essential \
     gcc \
     g++ \
     pkg-config \
-    python3-dev \
-    libffi-dev \
-    libssl-dev \
     && rm -rf /var/lib/apt/lists/*
 
 # Upgrade pip and install wheel
@@ -27,3 +24,65 @@ COPY requirements.txt .
 
 # Install Python packages
 RUN pip install --no-cache-dir -r requirements.txt
+
+# ────────────────
+# Stage 2: Production
+# ────────────────
+FROM python:3.10-slim
+
+# Create non-root user
+RUN groupadd -g 1000 appuser && useradd -r -u 1000 -g appuser appuser
+
+# Install runtime dependencies
+RUN apt-get update && apt-get install -y \
+    poppler-utils \
+    tesseract-ocr \
+    tesseract-ocr-eng \
+    tesseract-ocr-fas \
+    libgl1-mesa-glx \
+    libglib2.0-0 \
+    libsm6 \
+    libxext6 \
+    libxrender-dev \
+    libgomp1 \
+    curl \
+    wget \
+    sqlite3 \
+    && rm -rf /var/lib/apt/lists/* \
+    && apt-get clean
+
+# Copy virtual environment from builder
+COPY --from=builder /opt/venv /opt/venv
+ENV PATH="/opt/venv/bin:$PATH"
+
+# Set working directory
+WORKDIR /app
+
+# Create necessary directories
+RUN mkdir -p /app/data /app/logs /app/cache /app/uploads /app/backups
+
+# Copy application files
+COPY --chown=appuser:appuser . .
+
+# Set environment variables
+ENV PYTHONPATH=/app
+ENV DATABASE_PATH=/app/data/legal_documents.db
+ENV TRANSFORMERS_CACHE=/app/cache
+ENV HF_HOME=/app/cache
+ENV LOG_LEVEL=INFO
+ENV ENVIRONMENT=production
+ENV PYTHONUNBUFFERED=1
+ENV REDIS_HOST=redis
+ENV REDIS_PORT=6379
+ENV REDIS_URL=redis://redis:6379/0
+
+USER appuser
+
+EXPOSE 8000
+
+# Healthcheck
+HEALTHCHECK --interval=45s --timeout=30s --start-period=180s --retries=10 \
+    CMD curl -fs http://localhost:8000/ping || exit 1
+
+# ✅ اجرای برنامه از main.py در روت پروژه
+CMD ["sh", "-c", "python -c 'import os; os.makedirs(\"/app/data\", exist_ok=True); os.makedirs(\"/app/logs\", exist_ok=True); print(\"=== Application Startup at $(date) ===\")' && uvicorn main:app --host 0.0.0.0 --port 8000 --workers 1 --log-level info"]