Dockerfile

FROM python:3.11-slim

# Set working directory
WORKDIR /app

# Install system dependencies for network discovery and audio processing
RUN apt-get update && apt-get install -y \
    gcc \
    curl \
    && rm -rf /var/lib/apt/lists/* \
    && apt-get clean

# Copy requirements first for better layer caching
COPY requirements.txt .

# Install Python dependencies
RUN pip install --no-cache-dir --upgrade pip \
    && pip install --no-cache-dir -r requirements.txt

# Create non-root user for security
RUN groupadd -r appuser && useradd -r -g appuser appuser

# Copy application code
COPY . .

# Create static directory for TTS cache and set proper permissions
RUN mkdir -p static/cache \
    && chown -R appuser:appuser /app

# Environment variables with sensible defaults
ENV CHROMECAST_IP="" \
    EXTERNAL_HOST="" \
    PLAYBACK_VOLUME="0.6" \
    GRP_NAME="Google Home" \
    DISCOVERY_RETRY_SEC="10" \
    DISCOVERY_WAIT_TIMEOUT="30" \
    PLAYBACK_TIMEOUT="300" \
    PYTHONUNBUFFERED="1" \
    PYTHONDONTWRITEBYTECODE="1"

# Expose port
EXPOSE 5000

# Health check
HEALTHCHECK --interval=30s --timeout=10s --start-period=15s --retries=3 \
    CMD curl -f http://localhost:5000/discover/status || exit 1

# Switch to non-root user
USER appuser

# Run the application
CMD ["python", "main.py"]