FROM python:3.9-slim

# System deps
RUN apt-get update && apt-get install -y --no-install-recommends \
    wget unzip gnupg2 curl \
    libglib2.0-0 libnss3 libgconf-2-4 libxi6 libxcursor1 \
    libxcomposite1 libasound2 libxtst6 libxrandr2 xdg-utils \
    fonts-liberation libu2f-udev libvulkan1 libxss1 \
    chromium chromium-driver \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/*

# Create and use unprivileged user
RUN useradd -m -u 1000 user
USER user

ENV PATH="/home/user/.local/bin:$PATH"
WORKDIR /app

# Install Python packages
COPY --chown=user ./requirements.txt requirements.txt
RUN pip install --no-cache-dir --upgrade -r requirements.txt

# Copy the rest of the app
COPY --chown=user . /app

# Expose port for Flask app
EXPOSE 7860

# Run Flask application
CMD ["python3", "app.py"]