FROM python:3.10

RUN useradd -m -u 1000 user

ENV HOME=/home/user
ENV PATH=/home/user/.local/bin:$PATH

USER user

WORKDIR $HOME/app

RUN --mount=type=secret,id=URL,mode=0444,required=true \

  git clone $(cat /run/secrets/URL) .

RUN pip install --no-cache-dir --upgrade -r requirements.txt

CMD ["python", "backend/main.py"]