Update Dockerfile

Dockerfile

@@ -1,30 +1,69 @@
-FROM python:3.11-slim
+# Phoenix Fury v9.0 - Production Dockerfile
+# Multi-stage build for optimal size and security
 
-ENV PYTHONUNBUFFERED=1 \
-    PYTHONDONTWRITEBYTECODE=1
+# ============================================================================
+# Stage 1: Builder
+# ============================================================================
+FROM python:3.11-slim as builder
 
-# Install system dependencies
-RUN apt-get update && apt-get install -y --no-install-recommends \
+# Install build dependencies
+RUN apt-get update && apt-get install -y \
     gcc \
     g++ \
     make \
-    libffi-dev \
-    libcap2-bin \
+    libssl-dev \
     && rm -rf /var/lib/apt/lists/*
 
-# Set working directory
-WORKDIR /app
+# Create virtual environment
+RUN python -m venv /opt/venv
+ENV PATH="/opt/venv/bin:$PATH"
 
-# Copy and install Python dependencies
+# Copy requirements and install
 COPY requirements.txt .
 RUN pip install --no-cache-dir --upgrade pip && \
     pip install --no-cache-dir -r requirements.txt
 
-# Copy application code
-COPY main.py .
+# ============================================================================
+# Stage 2: Runtime
+# ============================================================================
+FROM python:3.11-slim
+
+# Install runtime dependencies only
+RUN apt-get update && apt-get install -y \
+    libssl3 \
+    curl \
+    && rm -rf /var/lib/apt/lists/*
+
+# Copy virtual environment from builder
+COPY --from=builder /opt/venv /opt/venv
+
+# Set environment variables
+ENV PATH="/opt/venv/bin:$PATH" \
+    PYTHONUNBUFFERED=1 \
+    PYTHONDONTWRITEBYTECODE=1 \
+    WORKERS=1 \
+    HOST=0.0.0.0 \
+    PORT=8000
 
-# Expose API port
+# Create non-root user for security (will be overridden if root is needed)
+RUN useradd -m -u 1000 phoenix && \
+    mkdir -p /app && \
+    chown -R phoenix:phoenix /app
+
+WORKDIR /app
+
+# Copy application
+COPY phoenix_fury_v9.py .
+
+# Expose port
 EXPOSE 8000
 
-# Run the application
-CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "8000", "--workers", "1"]
+# Health check
+HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
+    CMD curl -f http://localhost:8000/ || exit 1
+
+# Default to non-root user (use --privileged and --user root for L4 attacks)
+USER phoenix
+
+# Start application
+CMD ["python", "-u", "phoenix_fury_v9.py"]