FROM python:3.12-slim

WORKDIR /app
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt

COPY src ./src

# Utilisateur non-root (le crawler parse du HTML tiers avec lxml)
RUN useradd -m -u 1000 crawler
USER crawler

CMD ["python", "-m", "src.main"]