FROM ghcr.io/astral-sh/uv:debian-slim

ADD . /app
WORKDIR /app

RUN useradd -m -r nummi && \
	chown -R nummi /app

USER nummi

ENV PYTHONDONTWRITEBYTECODE=1
ENV PYTHONUNBUFFERED=1

RUN uv sync --locked

WORKDIR /app/nummi

CMD ["uv", "run", "gunicorn", "--bind", "0.0.0.0:8000", "--workers", "2", "nummi.wsgi:application"]