FROM python:3.13.4-slim

ENV PYTHONDONTWRITEBYTECODE=1
ENV PYTHONUNBUFFERED=1

WORKDIR /app

RUN useradd --create-home --shell /usr/sbin/nologin appuser

COPY requirements/backend.txt /app/requirements/backend.txt
RUN pip install --no-cache-dir -r /app/requirements/backend.txt

COPY backend/ /app/backend/

WORKDIR /app/backend

USER appuser

EXPOSE 8000

CMD ["gunicorn", "--bind", "0.0.0.0:8000", "azionelab.wsgi:application"]