FROM python:3.12-slim

ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1

WORKDIR /app

COPY requirements.txt /app/requirements.txt
RUN pip install --no-cache-dir -r /app/requirements.txt && \
    addgroup --system ariadne && \
    adduser --system --ingroup ariadne --home /app ariadne && \
    chown -R ariadne:ariadne /app

USER ariadne