FROM python:3.12-slim
WORKDIR /app

COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/

ENV UV_COMPILE_BYTECODE=1
ENV UV_LINK_MODE=copy
ENV PYTHONUNBUFFERED=1

COPY pyproject.toml uv.lock* ./
RUN uv sync --frozen --no-install-project || uv sync --no-install-project

RUN groupadd -g 10001 collector && useradd -u 10001 -g collector -m -s /bin/bash collector

COPY . ./
RUN chown -R collector:collector /app

USER collector

CMD ["uv", "run", "python", "runner.py"]