FROM python:3.12-slim

ENV PYTHONUNBUFFERED=1

RUN pip install --no-cache-dir fastmcp python-dotenv

RUN groupadd -g 1000 app && \
    useradd -m -u 1000 -g 1000 -s /bin/bash app

WORKDIR /workspace

COPY server.py /app/server.py

USER 1000:1000

EXPOSE 8000

HEALTHCHECK --interval=30s --timeout=10s --retries=3 --start-period=10s \
    CMD python -c "import urllib.request; urllib.request.urlopen('http://localhost:8000/health')"

CMD ["python", "/app/server.py"]