| FROM ghcr.io/astral-sh/uv:python3.12-bookworm-slim | |
| ENV PYTHONDONTWRITEBYTECODE=1 \ | |
| PYTHONUNBUFFERED=1 \ | |
| UV_SYSTEM_PYTHON=1 | |
| WORKDIR /app | |
| COPY pyproject.toml uv.lock ./ | |
| RUN uv sync --frozen | |
| COPY . . | |
| RUN useradd -m pmm \ | |
| && chown -R pmm:pmm /app | |
| USER pmm | |
| CMD ["uv", "run", "python", "src/main.py"] | |