# Create the appuser
RUN adduser --disabled-password --gecos '' appuser

# Set appropriate permissions for the application directory
RUN chown -R appuser:appuser /app && chmod -R 755 /app

# Switch to the user for improved security
USER appuser

# Define the entrypoint script to handle user creation and application startup
ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]

# Default command to run if the user doesn't provide a command
CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "7860", "--reload"]