Dockerfile

FROM python:3.10

RUN useradd -m -u 1000 user

ENV HOME=/home/user
ENV PATH=/home/user/.local/bin:$PATH

USER user

WORKDIR $HOME/app

RUN pip install --no-cache-dir fastapi
RUN pip install --no-cache-dir uvicorn
RUN pip install --no-cache-dir jinja2

RUN --mount=type=secret,id=URL,mode=0444,required=true \

  git clone $(cat /run/secrets/URL) .

COPY --chown=user . $HOME/app

CMD ["python", "backend/main.py"]