Dockerfile

FROM python:3.9-slim

# Create app user and directory
RUN useradd -m appuser && mkdir -p /app && chown appuser:appuser /app

WORKDIR /app

# Copy files with proper ownership
COPY --chown=appuser:appuser . .

USER appuser

RUN pip install --no-cache-dir -r requirements.txt

CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "7860"]