FROM python:3.12-slim
WORKDIR /app
COPY server.py cards.py gateway.py jwscore.py keys.py herald_cli.py card_templates.json ./
COPY cards ./cards
RUN useradd -r appuser && mkdir -p keys && chown -R appuser /app
USER appuser
ENTRYPOINT ["python", "server.py"]
