FROM python:3.13-slim

ENV PYTHONUNBUFFERED=1
ENV PYTHONDONTWRITEBYTECODE=1

RUN adduser -u 5678 --disabled-password --gecos "" appuser

WORKDIR /app

COPY requirements.txt .
RUN python -m pip install --no-cache-dir --upgrade -r requirements.txt

RUN mkdir -p /app/static && chown appuser:appuser /app/static

COPY --chown=appuser:appuser . /app

USER appuser
EXPOSE 8000
CMD ["uvicorn", "marbas.asgi:application", "--host", "0.0.0.0", "--port", "8000"]