FROM python:3.14-bookworm as build

WORKDIR /app

ENV PIP_DEFAULT_TIMEOUT=100 \
    PIP_DISABLE_PIP_VERSION_CHECK=1 \
    PIP_NO_CACHE_DIR=1

RUN curl -LsSf https://astral.sh/uv/install.sh | sh
COPY README.md pyproject.toml uv.lock ./
COPY wheels ./wheels

RUN ~/.local/bin/uv sync --frozen --no-dev --all-packages
COPY . .

FROM python:3.14-slim-bookworm as runtime
ENV VIRTUAL_ENV=/app/.venv \
	PATH=/app/.venv/bin:$PATH \
	PYTHONFAULTHANDLER=1 \
    PYTHONBUFFERED=1

WORKDIR /app

RUN groupadd -g 1001 app && \
    useradd -u 1001 -g app -s /bin/sh -d /app app

COPY --chown=1001:1001 --from=build /app /app

USER 1001:1001

CMD ["/app/.venv/bin/python3", "-m", "csirtmu.auth_keycloak_fixture_loader.main"]
