FROM python:3.12-slim
RUN apt-get update && apt-get install -y git && rm -rf /var/lib/apt/lists/*
WORKDIR /app

COPY requirements.txt .

# Use the secret ARF_GITHUB_PAT during the pip install step
RUN --mount=type=secret,id=ARF_GITHUB_PAT \
    git config --global url."https://x-access-token:$(cat /run/secrets/ARF_GITHUB_PAT)@github.com/".insteadOf "https://github.com/" && \
    pip install --no-cache-dir -r requirements.txt

COPY . .
CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "7860"]