FROM python:3.12-slim
WORKDIR /app
COPY pyproject.toml README.md requirements.lock ./
COPY keanan_mcp ./keanan_mcp
RUN pip install --no-cache-dir -r requirements.lock && pip install --no-cache-dir --no-deps . && useradd --system --uid 10001 --no-create-home keanan
USER keanan
HEALTHCHECK --interval=30s --timeout=5s CMD python -c "import socket;s=socket.create_connection(('127.0.0.1',8765),3);s.close()" || exit 1
ENV KEANAN_MCP_TRANSPORT=http KEANAN_MCP_HOST=0.0.0.0 KEANAN_MCP_PORT=8765 KEANAN_MCP_PATH=/mcp
EXPOSE 8765
CMD ["keanan-mcp"]
