FROM docker.io/library/python:3.9-alpine

RUN apk update --no-cache \
    && apk upgrade --no-cache \
    && pip install --no-cache-dir --upgrade pip

RUN addgroup -g 10001 py \
    && adduser -D -u 10000 -G py py

WORKDIR /var/app

COPY requirements.txt ./

RUN pip install --no-cache-dir --upgrade --requirement requirements.txt

USER 10000:10001

ENTRYPOINT ["/var/app/run"]
CMD ["server"]