# syntax=docker/dockerfile:1 FROM python:3.13-slim AS base WORKDIR /app ENV PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1 # Install deps COPY requirements.txt . RUN pip install --no-cache-dir -r requirements.txt # App COPY app ./app # Non-root user RUN useradd -m appuser USER appuser EXPOSE 8000 CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"]