Dockerfile

ARG env=prod

FROM python:3.10

WORKDIR /app

COPY ./requirements.txt /app/requirements.txt

RUN pip3 install --no-cache-dir -r /app/requirements.txt

# User
RUN useradd -m -u 1000 user
USER user
ENV HOME /home/user
ENV PATH $HOME/.local/bin:$PATH

WORKDIR $HOME
RUN mkdir app
WORKDIR $HOME/app
COPY . $HOME/app

# mount secrets
RUN if [ "$env" != "dev" ] --mount=type=secret,id=BOT_TOKEN,mode=0444,required=true ; then \
 git init && \
 git remote add origin $(cat /run/secrets/BOT_TOKEN) ; fi

EXPOSE 8081
CMD python etymbot.py