FROM python:3.12-slim
RUN apt-get update && apt-get install -y --no-install-recommends ffmpeg ca-certificates && rm -rf /var/lib/apt/lists/*
RUN pip install --no-cache-dir vosk==0.3.45
COPY model.zip /tmp/model.zip
RUN python -c "import hashlib,zipfile; p='/tmp/model.zip'; assert hashlib.sha256(open(p,'rb').read()).hexdigest() == '961d5ff98a17f4aa6de69864d0aa71fa5bac682301d2b5d17a3f24c5c99a46d4'; zipfile.ZipFile(p).extractall('/model')" && rm /tmp/model.zip
WORKDIR /service
COPY service.py ./
USER 1000:1000
ENV OPENBLAS_NUM_THREADS=1 OMP_NUM_THREADS=1
CMD ["python", "service.py"]