FROM python:3.12-alpine
RUN set -ex; \
    mkdir -p /app; \
    chown -R nobody:nobody /app
COPY requirements.txt /tmp/requirements.txt
RUN set -ex; \
    pip install -r /tmp/requirements.txt; \
    rm /tmp/requirements.txt
COPY *.py /app/
WORKDIR /app
USER nobody
CMD ["./main.py"]