# Use an official Python runtime as the base image
FROM python:3.9-slim
# Set the working directory in the container
WORKDIR /app
# Copy the requirements file into the container
COPY requirements.txt .
# Install the required packages
RUN pip install --no-cache-dir -r requirements.txt
# Copy the rest of the application code
COPY . .
# Create a non-root user and switch to it
RUN adduser --disabled-password --gecos '' appuser
# Create a directory for the database and set permissions
RUN mkdir -p /app/data && chown -R appuser:appuser /app/data
# Switch to the non-root user
USER appuser
# Make sure the static directory exists
RUN mkdir -p static
# Expose the port the app runs on
EXPOSE 8000
# Set the database path to the persisted volume
ENV DATABASE_URL=sqlite:////app/data/database.db
# Command to run the application
CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "8000"]