Dockerfile

FROM python:3.11-slim

RUN groupadd -r appgroup && \
    useradd -r -g appgroup -d /home/appuser -m -s /bin/bash appuser

# 2. Switch to the new user
USER appuser

ENV PATH="/home/appuser/.local/bin:$PATH"


# 3. Set working directory
WORKDIR /home/appuser

COPY requirements.txt .
RUN pip install --upgrade pip \
    && pip install --no-cache-dir -r requirements.txt

COPY . .

EXPOSE 7860
CMD ["hypercorn", "main:app", "--bind", "0.0.0.0:7860", "--workers", "3"]