FROM python:3.12-slim
WORKDIR /app
COPY central/requirements.txt /app/requirements.txt
RUN pip install --no-cache-dir -r requirements.txt && useradd --uid 10001 --create-home idr
COPY central /app/central
RUN mkdir /data && chown idr:idr /data
USER idr
VOLUME ["/data"]
EXPOSE 8765
ENTRYPOINT ["python", "-m", "central.server", "--data", "/data"]
CMD ["serve", "--host", "0.0.0.0", "--port", "8765", "--public-origin", "https://central.example.invalid"]
