Dockerfile

FROM nginx:1.25-alpine

# envsubst for templating
RUN apk add --no-cache gettext

# Runtime vars (set at deploy)
ENV HF_TOKEN=""
ENV UPSTREAM_HOST=""

# Keep everything we touch outside /etc to avoid perms issues
COPY nginx.conf.template /app/nginx.conf.template
COPY entrypoint.sh /app/entrypoint.sh
RUN chmod +x /app/entrypoint.sh

EXPOSE 7860
CMD ["/app/entrypoint.sh"]