FROM python:3.12-slim-bookworm

ENV PYTHONUNBUFFERED=1 \
    PYTHONDONTWRITEBYTECODE=1

WORKDIR /app

RUN groupadd --gid 1000 app \
    && useradd \
        --uid 1000 \
        --gid 1000 \
        --no-create-home \
        --shell /usr/sbin/nologin \
        app

COPY requirements.txt ./
RUN pip install \
        --no-cache-dir \
        --disable-pip-version-check \
        -r requirements.txt

COPY --chown=app:app bot.py ./

USER app:app

CMD ["python", "bot.py"]