# WebSocket ⇄ TAK TLS relay. Deliberately tiny: no compiler, no ffmpeg, no git.
# The OTS image next door needs all three and takes minutes to build; this one is
# a few seconds, so a relay change does not cost a server rebuild.
FROM python:3.13-slim

RUN pip install --no-cache-dir "websockets>=12,<16"

RUN adduser --system --no-create-home --group relay
USER relay

WORKDIR /app
COPY cot_ws_relay.py /app/cot_ws_relay.py

EXPOSE 8090
STOPSIGNAL SIGINT
ENTRYPOINT ["python3", "-u", "/app/cot_ws_relay.py"]
