FROM library/python:3.10-alpine3.17

WORKDIR /app

COPY requirements.txt /app
RUN --mount=type=cache,target=/root/.cache/pip \
    pip3 install -r requirements.txt

COPY static /app/static
COPY app.py /app
COPY flag_<REDACTED> /app
COPY index.html /app

RUN adduser --disabled-password --gecos '' appuser

RUN chmod a+rw /app/static/downloads

USER appuser

EXPOSE 5000

ENTRYPOINT ["python3", "app.py"]
