FROM python:3.12-slim

ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
    PIP_NO_CACHE_DIR=1

WORKDIR /app

COPY pyproject.toml README.md ./
COPY app ./app

RUN pip install --upgrade pip && pip install . && \
    groupadd --system financebot && \
    useradd --system --gid financebot --home-dir /app financebot && \
    mkdir -p /app/data && chown -R financebot:financebot /app/data

USER financebot

CMD ["python", "-m", "app"]