diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..90ab869
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,29 @@
+FROM python:3.14-slim
+
+ENV PYTHONDONTWRITEBYTECODE=1 \
+	PYTHONUNBUFFERED=1 \
+	PIP_NO_CACHE_DIR=1
+
+WORKDIR /app
+
+# Optional but useful for Pillow runtime compatibility in slim images
+RUN apt-get update && apt-get install -y --no-install-recommends \
+	libjpeg62-turbo \
+	zlib1g \
+&& rm -rf /var/lib/apt/lists/*
+
+COPY requirements.txt ./
+RUN pip install -r requirements.txt
+
+COPY . .
+
+# Non-root runtime user
+RUN useradd -m -u 10001 catnote && chown -R catnote:catnote /app
+USER catnote
+
+EXPOSE 5000
+
+# BLEHD_SOCKET can be overridden at runtime
+ENV BLEHD_SOCKET=/run/bleh/blehd.sock
+
+CMD ["python", "app.py", "--port", "5000"]