FROM python:3.11.16-slim-bookworm
ENV PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1
WORKDIR /app
RUN groupadd --gid 10001 zhisou && useradd --uid 10001 --gid 10001 --no-create-home --shell /usr/sbin/nologin zhisou \
    && mkdir /data && chown 10001:10001 /data
COPY requirements.txt ./
RUN pip install --no-cache-dir -r requirements.txt
COPY app.py monitoring.py storage.py config.py geo_update.py ./
COPY monitor-static/ ./monitor-static/
USER 10001:10001
EXPOSE 4188
HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 \
    CMD python -c "import json, urllib.request; r=urllib.request.urlopen('http://127.0.0.1:4188/healthz',timeout=3); assert r.status==200 and json.load(r).get('ok') is True"
CMD ["python", "app.py"]
