Remove Docker image deployment workflow and update Dockerfile for improved setup and environment variable handling

.github/workflows/deploy-image.yml

@@ -1,44 +0,0 @@
-name: Create and publish a Docker image
-
-on: push
-
-env:
-  REGISTRY: ghcr.io
-  IMAGE_NAME: ${{ github.repository }}
-
-jobs:
-  build-and-push-image:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      packages: write
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v3
-
-      - name: Log in to the Container registry
-        uses: docker/login-action@f054a8b539a109f9f41c372932f1ae047eff08c9
-        with:
-          registry: ${{ env.REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Extract metadata (tags, labels) for Docker
-        id: meta
-        uses: docker/metadata-action@98669ae865ea3cffbcbaa878cf57c20bbf1c6c38
-        with:
-          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
-          tags: |
-            type=ref,event=branch
-            type=sha
-
-      - name: Build and push Docker image
-        uses: docker/build-push-action@ad44023a93711e3deb337508980b4b5e9bcdc5dc
-        with:
-          context: .
-          push: true
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          build-args: |
-            SECRET_TOKEN=${{ secrets.GROQ_API_KEY }}

.github/workflows/sync_to_hf.yml

@@ -0,0 +1,36 @@
+name: Sync to Hugging Face Space
+
+on:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: write
+
+jobs:
+  sync-to-space:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+        with:
+          fetch-depth: 0
+
+      - name: Prepare Hugging Face README
+        run: |
+          # Temporarily replace README.md for Hugging Face
+          mv README_hf.md README.md
+
+      - name: Push to Hugging Face Space
+        env:
+          HF_TOKEN: ${{ secrets.HF_TOKEN }}
+          HF_USERNAME: jatinmehra
+          HF_SPACE: PDF-Insight-PRO
+        run: |
+          git config --global user.email "github-actions[bot]@users.noreply.github.com"
+          git config --global user.name "github-actions[bot]"
+          git remote remove origin || true
+          git remote add origin "https://${HF_USERNAME}:${HF_TOKEN}@huggingface.co/spaces/${HF_USERNAME}/${HF_SPACE}"
+          git add README.md
+          git commit -m "Update Hugging Face README" || true
+          git push origin main || (git branch -M main && git push -f origin main)

Dockerfile

@@ -1,29 +1,54 @@
-# Use the official Python image as the base image
-FROM python:3.11-bullseye
+FROM python:3.12-slim
 
-# Set the working directory in the container
 WORKDIR /app
 
-# Copy the requirements.txt file into the container
-COPY requirements.txt .
+# Install system dependencies for langchain
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    gcc \
+    python3-dev \
+    && rm -rf /var/lib/apt/lists/*
 
-# Install dependencies
-RUN pip install --no-cache-dir -r requirements.txt
+# Create a non-root user and set up uploads directory
+RUN useradd -m -s /bin/bash appuser && \
+    mkdir -p /app/uploads && \
+    chown appuser:appuser /app/uploads
 
-# Create the directory for Streamlit secrets
-RUN mkdir -p /app/.streamlit
+# Copy application files and set permissions
+COPY . .
+RUN chown -R appuser:appuser /app && \
+    chmod -R u+rwx /app && \
+    chmod -R u+rwx /usr/local/lib/python3.12 /usr/local/bin
+
+# Install dependencies and verify uvicorn
+RUN python -m pip install --no-cache-dir -r requirements.txt && \
+    python -m pip install --no-cache-dir uvicorn && \
+    uvicorn --version
 
 # Accept the secret token as a build argument
-ARG SECRET_TOKEN
+ARG GROQ_API_KEY
+ARG TAVILY_API_KEY
 
-# Create the secrets.toml file with the token
-RUN echo "[general]\nemail = \"[email protected]\"\n\n[api]\ntoken = \"$SECRET_TOKEN\"" > /app/.streamlit/secrets.toml
+# Docs: https://huggingface.co/docs/hub/en/spaces-sdks-docker#secrets-and-variables-management
 
-# Copy the rest of the application code into the container
-COPY . .
+# Expose the secret GROQ_API_KEY and OLLAMA_API_TOKEN at build time and set them as environment variables
+RUN --mount=type=secret,id=GROQ_API_KEY,mode=0444,required=true \
+    export GROQ_API_KEY=$(cat /run/secrets/GROQ_API_KEY) && \
+    echo "GROQ_API_KEY is set."
+    
+RUN --mount=type=secret,id=TAVILY_API_KEY,mode=0444,required=true \
+    export TAVILY_API_KEY=$(cat /run/secrets/TAVILY_API_KEY) && \
+    echo "TAVILY_API_KEY is set."
+
+
+# Set environment variables
+ENV PYTHONPATH=/app \
+    PATH=/usr/local/bin:$PATH
+
+# Switch to non-root user
+USER appuser
 
-# Expose the Streamlit default port (8501)
-EXPOSE 8501
+# Expose Streamlit port
+EXPOSE 7860
 
-# Define the command to run the app
-CMD ["streamlit", "run", "app.py", "--server.port=8501", "--server.address=0.0.0.0"]
+# Run the fastapi server
+CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]