FROM python:3.12-slim
ENV PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1 PYTHONPATH=/app/backend
WORKDIR /app
RUN groupadd --gid 10001 renderer && useradd --uid 10001 --gid renderer --create-home renderer
COPY backend/requirements.lock /app/backend/requirements.lock
ARG PIP_INDEX_URL=https://pypi.org/simple
RUN pip install --no-cache-dir -r backend/requirements.lock
COPY --chown=renderer:renderer backend/app /app/backend/app
COPY --chown=renderer:renderer frontend /app/frontend
RUN mkdir /data && chown renderer:renderer /data
USER renderer
EXPOSE 8000
HEALTHCHECK --interval=15s --timeout=5s CMD python -c "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8000/healthz')"
CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000", "--no-access-log"]