# Deployment preparation only; no image has been published or service provisioned.
FROM python:3.12-slim AS build
RUN apt-get update && apt-get install -y --no-install-recommends gcc libc6-dev && rm -rf /var/lib/apt/lists/*
WORKDIR /app
COPY vendor vendor
COPY scripts scripts
COPY app app
COPY data data
RUN python scripts/build_native.py && python scripts/verify_native_threads.py

FROM python:3.12-slim
WORKDIR /app
COPY requirements.lock .
RUN pip install --no-cache-dir -r requirements.lock && useradd --uid 10001 --create-home stjernerne
COPY --from=build /app/build /app/build
COPY app app
COPY static static
COPY data data
COPY source source
COPY LICENSE COPYING THIRD_PARTY.md ./
USER 10001
ENV PYTHONDONTWRITEBYTECODE=1
EXPOSE 8765
HEALTHCHECK --interval=30s --timeout=3s CMD python -c "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8765/api/health',timeout=2)"
# Bind container to 127.0.0.1 on the host unless/until deployment is approved.
CMD ["python","-m","uvicorn","app.main:app","--host","0.0.0.0","--port","8765","--no-access-log","--no-proxy-headers"]
