Dockerfile

# VisaIQ — Production Dockerfile
# Multi-stage build: builder -> runtime (minimal image)
# Final image size target: < 500 MB

# ===== Stage 1: Builder =====
FROM python:3.12-slim AS builder

WORKDIR /build

# Install build tools needed for some ML packages
RUN apt-get update && apt-get install -y --no-install-recommends \
    gcc g++ \
    && rm -rf /var/lib/apt/lists/*

COPY requirements.txt .
RUN pip install --upgrade pip \
    && pip install --prefix=/install --no-cache-dir -r requirements.txt

# ===== Stage 2: Runtime =====
FROM python:3.12-slim AS runtime

LABEL org.opencontainers.image.title="VisaIQ"
LABEL org.opencontainers.image.description="Visa Processing Intelligence — ML-powered processing time predictor"
LABEL org.opencontainers.image.source="https://github.com/AkshatRaj00/visapredictor"
LABEL org.opencontainers.image.licenses="MIT"
LABEL org.opencontainers.image.authors="Akshat Raj <akshatraj00@github>"

# Security: non-root user
RUN groupadd -r visaiq && useradd -r -g visaiq -d /app -s /sbin/nologin visaiq

WORKDIR /app

# Copy installed packages from builder
COPY --from=builder /install /usr/local

# Copy application source
COPY --chown=visaiq:visaiq . .

# Streamlit config
RUN mkdir -p .streamlit && cat > .streamlit/config.toml <<EOF
[server]
headless = true
port = 8501
enableCORS = false
enableXsrfProtection = true
maxUploadSize = 10

[browser]
gatherUsageStats = false

[logger]
level = "warning"
EOF

USER visaiq

EXPOSE 8501 8001

# Health check
HEALTHCHECK --interval=30s --timeout=10s --start-period=30s --retries=3 \
    CMD python -c "import urllib.request; urllib.request.urlopen('http://localhost:8501/_stcore/health')"

# Default: run Streamlit UI
CMD ["streamlit", "run", "app.py", "--server.port=8501", "--server.address=0.0.0.0"]