FROM python:3.9-slim as build
WORKDIR /app
COPY requirements.txt .
RUN pip install --user -r requirements.txt

FROM python:3.9-slim
WORKDIR /app
COPY --from=build /root/.local /root/.local
COPY . .
RUN apt-get update && apt-get install -y --no-install-recommends adduser && adduser --disabled-password --gecos '' appuser && chown -R appuser /app
USER appuser
ENV PATH=/root/.local/bin:$PATH
CMD ["python", "app.py"]