FROM python:3.11-slim

RUN DEBIAN_FRONTEND=noninteractive apt-get update \
    && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends iputils-ping \
    && rm -rf /var/lib/apt/lists/*

# Upgrade pip to suppress the version notice
RUN pip install --upgrade pip

WORKDIR /app

COPY pyproject.toml .
COPY fablednetmon/ fablednetmon/
RUN pip install --no-cache-dir .

COPY alembic.ini .

# Runtime directories — owned by app user
RUN useradd -m -u 1000 app \
    && mkdir -p /data/playbook_cache /data/plugins \
    && chown -R app:app /data /app

USER app

EXPOSE 5000

CMD ["fablednetmon", "--host", "0.0.0.0", "--port", "5000"]