FROM python:3.13-alpine

ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1

RUN addgroup -S app && adduser -S -G app app
WORKDIR /srv
COPY infrastructure/docker/web/index.html /srv/index.html
COPY infrastructure/docker/web/healthz /srv/healthz
RUN chown -R app:app /srv
USER app
EXPOSE 8080
CMD ["python", "-m", "http.server", "8080", "--bind", "0.0.0.0", "--directory", "/srv"]