Dockerfile

# Dockerfile (repo root)
FROM python:3.11-slim
ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1

RUN apt-get update && apt-get install -y --no-install-recommends \
    ca-certificates curl tini && \
    rm -rf /var/lib/apt/lists/*

WORKDIR /app

# Create a fixed non-root user (UID/GID 10001) usable everywhere
RUN groupadd -g 10001 appgroup \
 && useradd -u 10001 -g 10001 -m -s /bin/bash appuser

# Create runtime dirs and grant ownership
RUN mkdir -p /data /app/logs \
 && chown -R 10001:10001 /data /app/logs /app


COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt

COPY app ./app

# API default
EXPOSE 8000
# RabbitMQ
EXPOSE 15672
# In case an external app need to communicate:
EXPOSE 5672

# default entrypoint: API
CMD ["tini", "--", "uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"]