FROM python:3.12-slim

WORKDIR /app
COPY pyproject.toml uv.lock README.md alembic.ini /app/
COPY src /app/src
COPY migrations /app/migrations

RUN pip install --no-cache-dir .

RUN useradd --create-home --uid 10001 sbom-nexus \
    && mkdir -p /data \
    && chown sbom-nexus:sbom-nexus /data

USER sbom-nexus
ENV SBOM_NEXUS_DATABASE_PATH=/data/sbom-nexus.db
EXPOSE 8010

CMD ["sbom-nexus", "serve", "--host", "0.0.0.0", "--port", "8010"]