FROM python:3.11-slim

# Create a non-root user for security
RUN useradd --create-home --shell /bin/bash app

# Install gcc compiler for C code compilation and other production dependencies
RUN apt-get update && \
    apt-get install -y gcc build-essential curl && \
    rm -rf /var/lib/apt/lists/*

# Set working directory
WORKDIR /app

# Copy requirements and install Python dependencies
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt

# Copy application code
COPY . .

# Change ownership to the app user
RUN chown -R app:app /app
USER app

# Expose port 5000
EXPOSE 5000

# Run the application with Gunicorn in production mode using config file
CMD ["gunicorn", "--config", "gunicorn.conf.py", "app:app"]