FROM python:3.11-slim

ENV PYTHONUNBUFFERED=1 PIP_NO_CACHE_DIR=1
WORKDIR /app

RUN pip install --no-cache-dir fastapi uvicorn[standard] docker

COPY app.py /app/app.py
COPY templates /app/templates

# Non-root
RUN useradd -m appuser
USER appuser

EXPOSE 9001
CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "9001"]