FROM python:3.12-slim

RUN groupadd -r bouncer && useradd -r -g bouncer -s /sbin/nologin bouncer

WORKDIR /app

COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt

COPY bouncer.py .

USER bouncer

ENTRYPOINT ["python", "-u", "bouncer.py"]