FROM python:3.11-slim RUN useradd -m -u 1000 user WORKDIR /home/user/app COPY --chown=user:user requirements.txt ./requirements.txt RUN pip install --no-cache-dir -r requirements.txt COPY --chown=user:user research ./research RUN mkdir -p /home/user/app/runtime && chown -R user:user /home/user/app USER user ENV PYTHONUNBUFFERED=1 PUREKIT_RESEARCH_DB=/home/user/app/runtime/research.sqlite EXPOSE 7860 CMD ["uvicorn", "research.service:app", "--host", "0.0.0.0", "--port", "7860", "--workers", "1", "--no-access-log"]