# syntax=docker/dockerfile:1.7
FROM python:3.13.14-slim@sha256:6771159cd4fa5d9bba1258caf0b82e6b73458c694d178ad97c5e925c2d0e1a91

COPY infrastructure/images/install-base-security-updates.sh /tmp/install-base-security-updates.sh
RUN sh /tmp/install-base-security-updates.sh \
    && rm /tmp/install-base-security-updates.sh

ARG GIT_REVISION
ARG GIT_SOURCE_TREE
ARG IMAGE_VERSION
ARG SOURCE_DATE_EPOCH
ARG BUILD_DATE

RUN groupadd --gid 10001 hub \
    && useradd --uid 10001 --gid 10001 --create-home --shell /usr/sbin/nologin hub
COPY infrastructure/images/observability/collector.py /opt/hub/collector.py
RUN chown -R 10001:10001 /opt/hub

LABEL org.opencontainers.image.title="itworx-mcp-hub-observability-collector" \
      org.opencontainers.image.revision="${GIT_REVISION}" \
      org.opencontainers.image.source="https://gitea.example.com/jens/itworx-mcp-hub" \
      org.opencontainers.image.source-tree="${GIT_SOURCE_TREE}" \
      org.opencontainers.image.version="${IMAGE_VERSION}" \
      org.opencontainers.image.source-date-epoch="${SOURCE_DATE_EPOCH}" \
      org.opencontainers.image.created="${BUILD_DATE}" \
      org.opencontainers.image.vendor="ITWorx"

USER 10001:10001
EXPOSE 4318
ENTRYPOINT ["python", "/opt/hub/collector.py"]