FROM python:3.12-slim

ENV PYTHONUNBUFFERED=1 \
    PYTHONDONTWRITEBYTECODE=1 \
    CERT_OUTPUT_DIR=/app/certs \
    ACME_ACCOUNT_DIR=/app/data

WORKDIR /app

# tzdata, damit die Log-Zeitstempel zur eigenen Zeitzone passen (TZ in .env)
RUN apt-get update \
    && apt-get install -y --no-install-recommends tzdata \
    && rm -rf /var/lib/apt/lists/*

COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt

COPY app ./app

RUN mkdir -p /app/certs /app/data && chmod 777 /app/certs /app/data

ENTRYPOINT ["python", "-m", "app.main"]
CMD ["--help"]