FROM python:3.12-slim
WORKDIR /app
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt && useradd -m -u 10001 digest && mkdir /data && chown digest /data
COPY service ./service
USER digest
EXPOSE 8080
CMD ["python", "-m", "service.app"]