FROM python:3.12-slim

WORKDIR /app

ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
    DATABASE_PATH=/app/data/bot.db

RUN adduser --disabled-password --gecos "" --uid 1000 bot \
    && mkdir -p /app/data \
    && chown bot:bot /app/data

COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt

COPY --chown=bot:bot bot ./bot

USER bot

CMD ["python", "-m", "bot"]