FROM python:3.12-slim WORKDIR /app RUN apt-get update -qq && apt-get install -y -qq openssh-client git && rm -rf /var/lib/apt/lists/* # git operations run as root over bind-mounted /repos (may be owned by host uid) -> trust it. RUN git config --system --add safe.directory '*' COPY requirements.txt . RUN pip install --no-cache-dir -r requirements.txt COPY src/ ./src/ COPY data/ ./data/ ENV PYTHONPATH=/app CMD ["uvicorn", "src.main:app", "--host", "0.0.0.0", "--port", "8500"]