FROM python:3.14-slim@sha256:82abc9f53600280b0757126f83c5a7d47088592d2acb6b4c0b9e97f76865508c
ENV PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1
WORKDIR /app
COPY infra/requirements.txt /app/requirements.txt
RUN pip install --no-cache-dir -r requirements.txt \
    && groupadd --gid 10001 lapse \
    && useradd --uid 10001 --gid lapse --no-create-home lapse \
    && mkdir /data && chown lapse:lapse /data
COPY src/lapse/__init__.py src/lapse/accounts.py src/lapse/crypto.py src/lapse/groups.py /app/lapse/
USER 10001:10001
EXPOSE 8000
CMD ["python", "-m", "lapse.accounts"]
