FROM python:3.12-slim
ENV PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1 PORT=8080
WORKDIR /app
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt
COPY support/ support/
COPY data/ data/
COPY web/ web/
# Utilisateur non root ; var/ accueille la base SQLite et le cache d'index.
RUN useradd -m app && mkdir -p var && chown app var
USER app
CMD ["python", "-m", "support.app"]
