docker: don't use root user, only copy package source

Signed-off-by: Bradley Reynolds <[email protected]>

Author: shenanigansd

Dockerfile

@@ -1,11 +1,18 @@
 FROM --platform=linux/amd64 python:3.11-slim@sha256:66e41d125c90d679ad69b264ac7b78a3bd27e7510b63ba5987ad42678bbefc32
 
+RUN adduser --disabled-password api
+USER api
+
+ENV PATH="${PATH}:/home/api/.local/bin"
+
 # Set Git SHA environment variable
 ARG git_sha="development"
 ENV GIT_SHA=$git_sha
 
-COPY . .
+WORKDIR /app
+COPY pyproject.toml src ./
+RUN python -m pip install .
 
-RUN pip install .
+EXPOSE 8080
 
 CMD ["uvicorn", "api.server:app", "--host", "0.0.0.0", "--port", "8080"]