update to python 3.13

Dockerfile

@@ -1,45 +1,39 @@
-FROM python:3.11-slim
+FROM python:3.13-slim
 
-# Set working directory
+# Set environment variables
+ENV PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1 \
+    PYTHONIOENCODING=utf-8
+
+# Install system dependencies
+RUN apt-get update && apt-get install -y \
+    curl \
+    && rm -rf /var/lib/apt/lists/*
+
+# Create app user and directory
+RUN useradd --create-home --shell /bin/bash app
 WORKDIR /app
 
-# Set timezone and install system packages
-ENV TZ=America/New_York
-RUN apt-get update && apt-get install -y --no-install-recommends \
-    sqlite3 curl gosu git tzdata \
-  && ln -snf /usr/share/zoneinfo/$TZ /etc/localtime \
-  && echo $TZ > /etc/timezone \
-  && rm -rf /var/lib/apt/lists/* \
-  && apt-get clean \
-  && groupadd -g 1000 appuser \
-  && useradd -u 1000 -g appuser -m appuser
-
-# Install Python dependencies efficiently
+# Copy requirements and install Python dependencies
 COPY requirements.txt .
-RUN pip install --no-cache-dir -r requirements.txt \
-  && pip cache purge \
-  && rm -rf ~/.cache/pip
+RUN pip install --no-cache-dir --upgrade pip && \
+    pip install --no-cache-dir -r requirements.txt
 
-# Copy application files in order of change frequency (for better caching)
-COPY VERSION .
-COPY core/ ./core/
-COPY clients/ ./clients/
-COPY nfoguard.py .
+# Copy application code
+COPY . .
 
-# Copy git info to detect branch at runtime
-COPY .git/HEAD .git/
-COPY .git/refs/ .git/refs/
+# Set ownership
+RUN chown -R app:app /app
 
-# Final setup in single layer
-RUN mkdir -p /app/data \
-  && chown -R appuser:appuser /app \
-  && printf '#!/bin/bash\nset -euo pipefail\nPUID=${PUID:-1000}\nPGID=${PGID:-1000}\nif [ "$(id -u)" -eq 0 ]; then\n  groupmod -o -g "$PGID" appuser 2>/dev/null || groupadd -o -g "$PGID" appuser\n  id appuser &>/dev/null || useradd -o -u "$PUID" -g "$PGID" -m appuser\n  usermod -o -u "$PUID" -g "$PGID" appuser 2>/dev/null || true\n  chown -R "$PUID:$PGID" /app || true\n  exec gosu appuser "$@"\nelse\n  exec "$@"\nfi' > /entrypoint.sh \
-  && chmod +x /entrypoint.sh
+# Switch to app user
+USER app
 
 # Health check
 HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
-  CMD curl -f http://localhost:8080/health || exit 1
+    CMD curl -f http://localhost:8080/health || exit 1
 
+# Expose port
 EXPOSE 8080
-ENTRYPOINT ["/entrypoint.sh"]
+
+# Run the application
 CMD ["python", "nfoguard.py"]