FROM python:3.12-alpine
COPY --from=ghcr.io/astral-sh/uv:0.12 /uv /uvx /bin/

ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
    PATH="/app/.venv/bin:$PATH"

WORKDIR /app

# Cairo renders PNGs; DejaVu supplies the placeholder's sans-serif font.
RUN apk add --no-cache cairo font-dejavu \
    && addgroup -S app \
    && adduser -S -G app app

COPY pyproject.toml uv.lock README.md LICENSE ./
COPY src ./src
RUN apk add --no-cache --virtual .build-deps build-base libffi-dev \
    && uv sync --locked --no-dev --no-editable \
    && uv cache clean \
    && apk del .build-deps

USER app
EXPOSE 8000
CMD ["gunicorn", "--bind", "0.0.0.0:8000", "--workers", "2", "--access-logfile", "-", "--error-logfile", "-", "app:create_app()"]