FROM python:3.12-slim

ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
    PIP_NO_CACHE_DIR=1 \
    PIP_DISABLE_PIP_VERSION_CHECK=1

WORKDIR /app

COPY requirements.txt /app/requirements.txt
RUN pip install --no-cache-dir -r /app/requirements.txt

COPY src/ /app/src/
RUN chmod -R a+rX /app/src

ENV PYTHONPATH=/app/src

ARG INSPECTOR_UID=1000
ARG INSPECTOR_GID=1000
RUN groupadd --gid ${INSPECTOR_GID} inspector \
 && useradd  --uid ${INSPECTOR_UID} --gid inspector --home-dir /app --shell /usr/sbin/nologin inspector \
 && mkdir -p /app/logs /app/data \
 && chown -R inspector:inspector /app/logs /app/data

USER inspector

CMD ["python", "-m", "inspector.main", "--config", "/app/config.yml"]