# server/Dockerfile
FROM python:3.11-slim

WORKDIR /app

COPY server/requirements.txt /app/requirements.txt
RUN pip install --no-cache-dir -r requirements.txt

COPY server/ /app/server/

ENV PYTHONPATH=/app
EXPOSE 9090

RUN adduser --disabled-password --gecos "" appuser && chown -R appuser /app
USER appuser

CMD ["gunicorn", "--bind", "0.0.0.0:9090", "--workers", "2", "--timeout", "60", "server.app:app"]
