FROM python:3.10-slim

# System deps: OpenCV requires libgl1 and libglib2.0
RUN apt-get update && \
    apt-get install -y --no-install-recommends libgl1 libglib2.0-0 && \
    rm -rf /var/lib/apt/lists/*

WORKDIR /app

COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt

COPY app.py .

ENV MODEL_PORT=9002
EXPOSE 9002

# Drop root privileges
RUN adduser --disabled-password --gecos "" appuser
USER appuser

CMD ["python", "app.py"]