# Immagine minima: nessuna dipendenza pip, nessuna rete in fase di build.
FROM python:3.12-alpine3.20

ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
    DATABASE_PATH=/data/scores.db \
    PORT=8791

WORKDIR /app
COPY app.py /app/app.py
RUN adduser -D -u 10001 scores && mkdir -p /data && chown scores /data
USER scores

EXPOSE 8791
HEALTHCHECK --interval=15s --timeout=3s --retries=3 --start-period=5s \
  CMD python -c "import urllib.request;urllib.request.urlopen('http://127.0.0.1:8791/health',timeout=2)"

CMD ["python", "/app/app.py"]