# Dockerfile
FROM python:3.12-slim
WORKDIR /app
COPY pyproject.toml ./
COPY pdpcompare ./pdpcompare
RUN pip install --no-cache-dir ".[server]"
# Non-root runtime user. A NEW named volume copies /data's ownership from
# the image; a volume created by a pre-1.7 root-running image stays owned
# by root and needs a one-time chown (see server-ops.md).
RUN useradd --system --uid 10001 --create-home pdp \
    && mkdir -p /data && chown pdp /data
ENV PDP_DATA_DIR=/data
VOLUME /data
EXPOSE 8080
USER pdp
CMD ["pdpcompare-server"]
