FROM python:3.12-slim AS base
ENV PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1 PIP_NO_CACHE_DIR=1
RUN apt-get update && apt-get install -y --no-install-recommends libmagic1 ca-certificates && rm -rf /var/lib/apt/lists/* \
    && useradd -r -u 10001 -m -d /home/andy andy
WORKDIR /app
COPY pyproject.toml README.md ./
COPY andymal ./andymal
COPY client ./client
COPY web ./web
RUN pip install --no-cache-dir . && mkdir -p /data && chown -R andy:andy /data /app
USER andy
ENV ANDY_DATA_DIR=/data
EXPOSE 8080
HEALTHCHECK --interval=30s --timeout=5s CMD python -c "import urllib.request;urllib.request.urlopen('http://127.0.0.1:8080/healthz')" || exit 1
CMD ["uvicorn", "andymal.api.app:app", "--host", "0.0.0.0", "--port", "8080", "--workers", "1"]
