FROM registry.cn-chengdu.aliyuncs.com/go_ls/bert_base:latest

WORKDIR /app

COPY services/ ./services/
COPY scripts/ ./scripts/
COPY .env .env



# 生成 supervisor 配置
RUN python scripts/generate_supervisor_conf.py

# 创建日志目录并设置权限
RUN mkdir -p /var/log/supervisor /app/logs && \
    chown -R 1000:1000 /var/log/supervisor /app/logs

# 创建非root用户
# 创建非root用户并设置所有权
RUN useradd -m -u 1000 appuser && \
    chown -R appuser:appuser /app && \
    chown -R appuser:appuser /var/log/supervisor

# 切换到非root用户
USER appuser

# 启动命令：先下载模型，再启动 supervisor
CMD ["sh", "-c", "python scripts/download_models.py && supervisord -c ./supervisor.conf"]