FROM python:3.12-slim-trixie
COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/

RUN apt-get update && apt-get install -y --no-install-recommends git && rm -rf /var/lib/apt/lists/*

RUN useradd -m -u 1000 appuser

COPY --chown=appuser:appuser . /app

ENV UV_NO_DEV=1

WORKDIR /app

USER appuser

RUN uv sync --locked

EXPOSE 7860

CMD ["uv", "run", "marimo", "run", "filter_engine.py", "--no-token", "--host", "0.0.0.0", "--port", "7860"]