separate images, no more .env

web.Dockerfile

@@ -0,0 +1,23 @@
+# Stage 1: install dependencies
+FROM python:3.10-slim AS build
+
+WORKDIR /aa-api
+# TODO: multistage build
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    build-essential \
+    gcc \
+    g++ \
+    && rm -rf /var/lib/apt/lists/*
+
+RUN pip install --no-cache-dir poetry
+COPY pyproject.toml poetry.lock .
+RUN poetry install --with web --no-interaction --no-ansi --no-root --no-cache
+
+# Copy the application code
+COPY alembic.ini ./
+COPY .env* ./app/
+COPY ./secrets/ ./secrets/
+COPY ./app/ ./app/
+
+# Run the FastAPI app with Uvicorn
+ENTRYPOINT ["poetry", "run"]