FROM python:3.12-slim WORKDIR /srv ENV PYTHONUNBUFFERED=1 COPY requirements.txt . RUN pip install --no-cache-dir -r requirements.txt COPY app ./app RUN useradd -r -u 10001 app && mkdir -p /srv/data && chown app /srv/data USER app EXPOSE 8000 CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"]