FROM python:3.12-slim-bookworm

RUN apt-get update \
    && apt-get install -y --no-install-recommends openssh-client ca-certificates \
    && rm -rf /var/lib/apt/lists/*

WORKDIR /app
COPY requirements.txt ./
RUN pip install --no-cache-dir -r requirements.txt

COPY bootstrap_service.py docker-entrypoint.sh ./
RUN chmod 0755 /app/docker-entrypoint.sh

EXPOSE 4092
ENTRYPOINT ["/app/docker-entrypoint.sh"]