Dockerfile

# Use a specific, slim Python image
FROM python:3.11.4-slim

# Set environment variables for optimal performance
ENV PYTHONDONTWRITEBYTECODE=1
ENV PYTHONUNBUFFERED=1

# Create a non-root user
RUN adduser --disabled-password --gecos "" appuser

# Install system dependencies and clean up afterward
RUN apt-get update && apt-get install -y --no-install-recommends \
    libgomp1 \
    && rm -rf /var/lib/apt/lists/*

COPY requirements.txt .
RUN pip install --no-cache-dir --upgrade pip && pip install --no-cache-dir -r requirements.txt

WORKDIR /code
COPY ./app /code/app

# Change ownership and switch to non-root user
RUN chown -R appuser:appuser /code
USER appuser

# Expose port 80
EXPOSE 8000

# Run Gunicorn with Uvicorn worker
CMD ["gunicorn", "app.main:app", "--workers", "3", "--worker-class", "uvicorn.workers.UvicornWorker","--timeout","3000", "--bind", "0.0.0.0:8000"]