FROM debian:stable-slim

RUN apt-get update && \
    apt-get upgrade -y && \
    apt-get install -y --no-install-recommends \
    apt-transport-https \
    ca-certificates \
    curl \
    ffmpeg \
    gnupg && \
    curl -sS https://debian.griffo.io/EA0F721D231FDD3A0A17B9AC7808B4DD62C41256.asc | gpg --dearmor --yes -o /etc/apt/trusted.gpg.d/debian.griffo.io.gpg && \
    echo 'Types: deb\nURIs: https://debian.griffo.io/apt\nSuites: trixie\nComponents: main\nSigned-By: /etc/apt/trusted.gpg.d/debian.griffo.io.gpg' | tee /etc/apt/sources.list.d/debian.griffo.io.sources && \
    apt-get update && \
    apt-get install -y --no-install-recommends uv && \
    apt-get remove gnupg -y && \
    apt-get remove --purge -y && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/*

RUN useradd -m -d /home/openwebui -s /usr/bin/sh openwebui && \
    mkdir /app && \
    chown openwebui:openwebui /app

USER openwebui

WORKDIR /app

RUN uv tool install open-webui[all]@latest -w huggingface_hub[hf_xet] -p cpython-3.12.11-linux-x86_64-gnu

EXPOSE 8080

CMD ["/usr/bin/sh", "-c", "uv tool run open-webui serve --host 0.0.0.0 --port 8080"]