FROM python:3.12-slim

WORKDIR /app

COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt

COPY app.py .
COPY templates/ templates/
COPY static/ static/

ENV DATA_DIR=/data
VOLUME ["/data"]
EXPOSE 9756

RUN useradd -m appuser && chown -R appuser /app
USER appuser

CMD ["python", "app.py"]