FROM library/python:latest

WORKDIR /app

COPY requirements.txt /app
RUN --mount=type=cache,target=/root/.cache/pip \
    pip3 install -r requirements.txt

COPY main_app.py /app
COPY flag.txt /app

RUN adduser --disabled-password --gecos '' appuser

USER appuser

EXPOSE 5000

ENTRYPOINT gunicorn --bind 0.0.0.0:5000 main_app:app
