FROM python:3.10-slim

# System deps: exiftool for EXIF/IPTC metadata extraction
RUN apt-get update && \
    apt-get install -y --no-install-recommends libimage-exiftool-perl && \
    rm -rf /var/lib/apt/lists/*

WORKDIR /app

COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt

COPY app.py .

ENV MODEL_PORT=9001
EXPOSE 9001

# Drop root privileges
RUN adduser --disabled-password --gecos "" appuser
USER appuser

CMD ["python", "app.py"]