Dockerfile

# Use the official lightweight Python image.
FROM python:3.11

# Allow statements and log messages to immediately appear in the logs
ENV PYTHONUNBUFFERED True

# Copy local code to the container image.
ENV APP_HOME /app
WORKDIR $APP_HOME
COPY . ./

# Install production dependencies.
RUN pip install --no-cache-dir -r requirements.txt

# Create a non-root user and switch to it
RUN useradd -m -u 1000 user
USER user
ENV HOME=/home/user \
	PATH=/home/user/.local/bin:$PATH

# Set work directory
WORKDIR $APP_HOME

# Change ownership of app files to the new user
COPY --chown=user . $HOME/app

# Run the web service on container startup.
CMD exec gunicorn --bind 0.0.0.0:7860 --workers 4 --threads 16 main:app