FROM python:3.13-slim

RUN groupadd -g 10001 mailroom && useradd -u 10001 -g mailroom -M -s /usr/sbin/nologin mailroom

WORKDIR /app
COPY pyproject.toml README.md LICENSE ./
COPY mailroom ./mailroom
RUN pip install --no-cache-dir ".[pdf]"

USER mailroom
ENV MAILROOM_DB=/data/mailroom.db \
    CREDENTIALS_DIRECTORY=/run/secrets
VOLUME /data
EXPOSE 8420

ENTRYPOINT ["mailroom"]
CMD ["serve", "--host", "0.0.0.0", "--port", "8420"]
