FROM python:3.12-slim
ENV PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1
WORKDIR /app
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt && useradd --system --uid 10001 --home /app wk1ng
COPY . .
RUN mkdir -p /app/data && chown -R wk1ng:wk1ng /app
USER wk1ng
EXPOSE 18080
CMD ["uvicorn", "app:app", "--host", "127.0.0.1", "--port", "18080", "--proxy-headers", "--forwarded-allow-ips", "127.0.0.1"]

