ARG env=prod FROM python:3.10 WORKDIR /app COPY ./requirements.txt /app/requirements.txt RUN pip3 install --no-cache-dir -r /app/requirements.txt # User RUN useradd -m -u 1000 user USER user ENV HOME /home/user ENV PATH $HOME/.local/bin:$PATH WORKDIR $HOME RUN mkdir app WORKDIR $HOME/app COPY . $HOME/app # mount secrets RUN if [ "$env" != "dev" ] --mount=type=secret,id=BOT_TOKEN,mode=0444,required=true ; then \ git init && \ git remote add origin $(cat /run/secrets/BOT_TOKEN) ; fi EXPOSE 8081 CMD python etymbot.py