FROM python:3.13-slim

WORKDIR /app/code

ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
    PIP_NO_CACHE_DIR=1

RUN useradd -r -m -d /home/cloudron -s /usr/sbin/nologin cloudron

COPY requirements.txt /app/code/
RUN pip install --no-cache-dir -r requirements.txt

COPY . /app/code

RUN chown -R cloudron:cloudron /app/code \
    && chmod +x /app/code/start.sh

USER cloudron

EXPOSE 8000

CMD ["/app/code/start.sh"]