Dockerfile

FROM python:3.12-slim

# system deps for pillow etc.
RUN apt-get update && apt-get install -y --no-install-recommends \
    build-essential && rm -rf /var/lib/apt/lists/*

WORKDIR /app
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt

COPY services/ services/
COPY api/ api/
# Demo claims (committed). Pre-baked index survives Render redeploys.
COPY data/demo_claims_index.json data/claims_index.json
COPY data/samples/ data/samples/

# NOTE: no .env, no secrets copied — injected at runtime by Render
ENV PYTHONUNBUFFERED=1
EXPOSE 8000
# exec makes uvicorn PID 1 so SIGINT/SIGTERM (Ctrl+C / docker stop) reach it
CMD ["sh", "-c", "exec uvicorn api.main:app --host 0.0.0.0 --port ${PORT:-8000}"]