FROM registry.access.redhat.com/ubi9/ubi-minimal:9.4

LABEL maintainer="betrieb@firma.de" \
      io.containers.autoupdate="registry"

RUN microdnf install -y python3 python3-pip shadow-utils && \
    microdnf clean all && \
    rm -rf /var/cache/*

WORKDIR /app

COPY requirements.txt .
RUN pip3 install --no-cache-dir -r requirements.txt

COPY src/ ./src/

# Gruppe 0 statt fester UID -> laeuft auch unter OpenShift
RUN chgrp -R 0 /app && chmod -R g=u /app
USER 1001

EXPOSE 8080
HEALTHCHECK --interval=30s --timeout=3s --retries=3 \
  CMD python3 -c "import urllib.request; urllib.request.urlopen('http://localhost:8080/health')"

ENTRYPOINT ["python3"]
CMD ["src/app.py"]