FROM python:3.12-slim

ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1

RUN useradd --create-home --uid 10001 backend \
    && mkdir -p /data \
    && chown backend:backend /data

WORKDIR /app
COPY --chown=backend:backend admin_backend.py /app/admin_backend.py

USER backend
EXPOSE 8765
VOLUME ["/data"]

HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
    CMD python -c "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8765/health', timeout=3)"

CMD ["python", "/app/admin_backend.py", "--host", "0.0.0.0", "--port", "8765", "--db", "/data/backend.db", "--runtime-file", "/tmp/backend_runtime.json"]