FROM python:3.12-alpine

WORKDIR /app
COPY app.py /app/app.py
RUN mkdir -p /data && chown nobody:nobody /data

USER nobody
EXPOSE 8080

CMD ["python", "-u", "/app/app.py"]