# NOTE: This hash is pinned to avoid version and environment differences.
FROM python:3.14.4-slim-trixie@sha256:538a18f1db92b4210a0b71aca2d14c156a96dedbe8867465c8ff4dce04d2ec39

RUN apt-get update && \
    apt-get install -y --no-install-recommends socat && \
    rm -rf /var/lib/apt/lists/*

WORKDIR /app
COPY app.py flag.txt ./

USER nobody:nogroup
CMD ["socat", "-T1", "tcp-listen:1337,fork,reuseaddr", "exec:'python app.py'"]
