exposing fastapi

Dockerfile

@@ -4,6 +4,7 @@ WORKDIR /app
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
     build-essential \
+    nginx \
     && rm -rf /var/lib/apt/lists/*
 
 COPY requirements.txt .
@@ -11,9 +12,15 @@ RUN pip install --no-cache-dir -r requirements.txt
 
 COPY . .
 
+RUN chmod +x start.sh
+
+# Allow non-root nginx: writable pid/log/cache dirs
+RUN mkdir -p /tmp/nginx && \
+    chmod -R 777 /var/log/nginx /var/lib/nginx /tmp/nginx
+
 RUN useradd -m -u 1000 user
 USER user
 
 EXPOSE 7860
 
-CMD ["sh", "-c", "uvicorn main:app --host 0.0.0.0 --port 8000 & streamlit run app.py --server.port 7860 --server.address 0.0.0.0 --server.headless true"]
+CMD ["./start.sh"]

nginx.conf

@@ -0,0 +1,33 @@
+pid /tmp/nginx/nginx.pid;
+
+events {
+    worker_connections 1024;
+}
+
+http {
+    client_body_temp_path /tmp/nginx/client_body;
+    proxy_temp_path /tmp/nginx/proxy;
+    fastcgi_temp_path /tmp/nginx/fastcgi;
+    uwsgi_temp_path /tmp/nginx/uwsgi;
+    scgi_temp_path /tmp/nginx/scgi;
+    server {
+        listen 7860;
+
+        # Route /api/* to FastAPI (strip /api prefix)
+        location /api/ {
+            proxy_pass http://127.0.0.1:8000/;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+        }
+
+        # Everything else goes to Streamlit
+        location / {
+            proxy_pass http://127.0.0.1:8501;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+        }
+    }
+}

start.sh

@@ -0,0 +1,9 @@
+#!/bin/bash
+# Start FastAPI
+uvicorn main:app --host 0.0.0.0 --port 8000 &
+
+# Start Streamlit
+streamlit run app.py --server.port 8501 --server.address 0.0.0.0 --server.headless true &
+
+# Start nginx in foreground
+nginx -g "daemon off;" -c /app/nginx.conf