FROM python:3.14-slim-bookworm ENV PYTHONUNBUFFERED=1 \ CONFIG_PATH=/app/config/config.json WORKDIR /app COPY requirements.txt ./ RUN pip install --no-cache-dir -r requirements.txt COPY reminder.py ./ # Run as a non-root user RUN useradd --create-home --uid 1000 app \ && chown -R app:app /app USER app STOPSIGNAL SIGTERM CMD ["python", "reminder.py"]