FROM python:3.11-slim RUN useradd -m -u 1000 appuser WORKDIR /app COPY requirements.txt . RUN pip install --no-cache-dir -r requirements.txt COPY . . ENV PYTHONUNBUFFERED=1 ENV PORT=8000 ENV HOME=/home/appuser USER appuser EXPOSE 8000 CMD ["sh", "-c", "uvicorn src.server:app --host 0.0.0.0 --port ${PORT:-8000}"]