FROM python:3.12-slim

RUN apt-get update && apt-get install --no-install-recommends -y \
    libcap2-bin \
    ca-certificates \
    && rm -rf /var/lib/apt/lists/*

RUN pip install --no-cache-dir uvloop pycryptodome
RUN setcap cap_net_bind_service=+ep /usr/local/bin/python3.12
RUN useradd -u 10000 tgproxy

USER tgproxy
WORKDIR /home/tgproxy/

COPY --chown=tgproxy mtprotoproxy.py config.py .

CMD ["python3", "mtprotoproxy.py"]