FROM python:3.12-slim WORKDIR /app ENV PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1 COPY apps/api/requirements-lock.txt . RUN pip install --no-cache-dir -r requirements-lock.txt RUN useradd --create-home --uid 10001 rf4 COPY --chown=rf4:rf4 apps/api . COPY --chown=rf4:rf4 rf4_research ./rf4_research USER rf4 EXPOSE 8000 CMD ["sh", "-c", "python -m app.seed && uvicorn app.main:app --host 0.0.0.0 --port 8000 --no-access-log"]