FROM python:3.9-slim

RUN adduser --disabled-password --gecos '' botuser
USER botuser
WORKDIR /home/botuser/app

COPY --chown=botuser:botuser requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt

COPY --chown=botuser:botuser . .

CMD ["python", "app.py"]