FROM python:3.12-slim

# Run as non-root user (SR-02)
RUN useradd -m -u 1001 cloudi
USER cloudi

WORKDIR /app

COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt

COPY . .

CMD ["python", "main.py"]