FROM python:3.13-slim
WORKDIR /app
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt && useradd -u 10001 -M app
COPY app.py presence.py vault.py ./
COPY static static
USER 10001:10001
EXPOSE 21114
CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "21114", "--no-access-log", "--no-proxy-headers"]
