FROM docker.io/library/python:3.12-alpine

RUN apk update --no-cache \
    && apk upgrade --no-cache \
    && pip install --no-cache-dir --upgrade pip

RUN addgroup -g 10001 py \
    && adduser -D -u 10000 -G py py

WORKDIR /var/app

COPY requirements.txt ./

RUN pip install --no-cache-dir --upgrade \
        --requirement requirements.txt

USER 10000:10001

COPY . ./

ENV UNWIND_DATA="/data"
VOLUME $UNWIND_DATA

ENV UNWIND_PORT=8097
EXPOSE $UNWIND_PORT

ENTRYPOINT ["/var/app/run"]
CMD ["server"]