FROM python:3.11-slim
RUN useradd -m -u 1000 appuser
WORKDIR /app
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt
COPY app.py         .
COPY templates/     templates/
COPY words/         words/
RUN chown -R appuser:appuser /app
USER appuser
EXPOSE 7860
CMD ["gunicorn", "--bind", "0.0.0.0:7860", "--workers", "2", \
     "--timeout", "60", "--graceful-timeout", "30", \
     "--access-logfile", "-", "app:app"]