FROM python:3.12-slim@sha256:d764629ce0ddd8c71fd371e9901efb324a95789d2315a47db7e4d27e78f1b0e9

ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
    PORT=8080

WORKDIR /app
COPY . /app
RUN pip install --no-cache-dir . \
    && useradd --system --uid 10001 --home-dir /nonexistent qonto

USER 10001
EXPOSE 8080
ENTRYPOINT ["qonto-assistant"]