diff --git a/app-config/auth-service/.dockerignore b/app-config/auth-service/.dockerignore
new file mode 100644
index 00000000..94143827
--- /dev/null
+++ b/app-config/auth-service/.dockerignore
@@ -0,0 +1 @@
+Dockerfile
diff --git a/app-config/auth-service/Dockerfile b/app-config/auth-service/Dockerfile
new file mode 100644
index 00000000..01ddf2fa
--- /dev/null
+++ b/app-config/auth-service/Dockerfile
@@ -0,0 +1,24 @@
+FROM condaforge/mambaforge as conda
+
+RUN mamba create --yes -p /opt/app python=3.9
+COPY . /opt/app-source
+RUN conda run -p /opt/app python -m pip install /opt/app-source
+RUN find -name '*.a' -delete \
+ && rm -rf /opt/app/conda-meta \
+ && rm -rf /opt/app/include \
+ && find -name '__pycache__' -type d -exec rm -rf '{}' '+' \
+ && rm -rf /opt/app/lib/python*/site-packages/pip /opt/ap/lib/python*/idlelib /opt/app/lib/python*/ensurepip \
+        /opt/app/bin/x86_64-conda-linux-gnu-ld \
+        /opt/app/bin/sqlite3 \
+        /opt/app/bin/openssl \
+        /opt/app/share/terminfo \
+&& find /opt/app/lib/ -name 'tests' -type d -exec rm -rf '{}' '+' \
+&& find /opt/app/lib -name '*.pyx' -delete \
+;
+
+FROM debian
+
+COPY --from=conda /opt/app /opt/app
+CMD [ \
+  "/opt/app/bin/python", "-m", "auth_service" \
+]
diff --git a/app-config/auth-service/app.sh b/app-config/auth-service/app.sh
deleted file mode 100755
index 2605d1ec..00000000
--- a/app-config/auth-service/app.sh
+++ /dev/null
@@ -1 +0,0 @@
-python -m auth_service
diff --git a/app-config/auth-service/auth_service/__init__.py b/app-config/auth-service/auth_service/__init__.py
index d669f742..6a1acfb2 100644
--- a/app-config/auth-service/auth_service/__init__.py
+++ b/app-config/auth-service/auth_service/__init__.py
@@ -11,6 +11,7 @@ import typing
 import aiohttp
 from keycloak.aio.realm import KeycloakRealm
 import tornado.ioloop
+import tornado.log
 import tornado.web
 
 
@@ -161,6 +162,7 @@ class MainHandler(BaseHandler):
 
 
 def make_app():
+    tornado.log.enable_pretty_logging()
     return tornado.web.Application(
         [
             (r"/", MainHandler),