FROM python:3.12-slim
RUN pip install --no-cache-dir pyyaml==6.0.2 \
 && groupadd --gid 10001 app \
 && useradd --uid 10001 --gid app --no-create-home --shell /usr/sbin/nologin app
WORKDIR /srv
COPY server.py ./
COPY ui ./ui
USER 10001:10001
ENV LAB_ROOT=/lab
EXPOSE 8090
CMD ["python", "server.py"]
