FROM mcr.microsoft.com/playwright/python:v1.58.0-noble

ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1

RUN groupadd --system app && useradd --system --gid app --create-home app

WORKDIR /app

COPY pyproject.toml uv.lock ./
RUN pip install --no-cache-dir uv \
    && uv export --format requirements-txt --no-dev --no-hashes --no-emit-project --frozen -o /tmp/requirements.txt \
    && pip install --no-cache-dir -r /tmp/requirements.txt \
    && pip install --no-cache-dir playwright-stealth

# orjson + brotli для ускорения JSON/HTTP.
RUN pip install --no-cache-dir "orjson>=3.10.0" "brotli>=1.1.0"

# Chromium + Firefox.
RUN python -m playwright install chromium firefox

COPY . .
RUN pip install --no-cache-dir -e .
RUN python -m compileall -q openlane_scraper
RUN chmod +x entrypoint.sh
RUN chown -R app:app /app

STOPSIGNAL SIGINT

USER app

# По умолчанию  API, но worker/beat переопределяют CMD в docker-compose
ENTRYPOINT ["./entrypoint.sh"]
CMD ["uvicorn", "openlane_scraper.api.app:app", "--host", "0.0.0.0", "--port", "8000"]
