FROM python:3.12-slim

ENV PYTHONUNBUFFERED=1 DATA_DIR=/data BIND=0.0.0.0 PORT=8765
WORKDIR /app

COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt

COPY statement_loader.py seed_rules.py budget.py app.py app_page.html app_dashboard.html app_budget.html app_accounts.html ./
COPY template/ ./template/

# statements, Bills_Tracker.xlsx and backups live in this volume, never in the image
RUN useradd -m -u 1000 app && mkdir /data && chown app /data
USER app
VOLUME /data
EXPOSE 8765

HEALTHCHECK --interval=30s --timeout=5s CMD python -c "import urllib.request;urllib.request.urlopen('http://127.0.0.1:8765/dashboard')" || exit 1
CMD ["python", "app.py"]