FROM python:3.11-slim

# Install ZMap and dependencies
RUN apt-get update && apt-get install -y \
    zmap \
    sudo \
    && rm -rf /var/lib/apt/lists/*

# Allow ZMap to run without password
RUN echo "www-data ALL=(ALL) NOPASSWD: /usr/bin/zmap" >> /etc/sudoers

WORKDIR /app
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt
COPY . .

USER www-data
EXPOSE 5000
CMD ["gunicorn", "--bind", "0.0.0.0:5000", "--workers", "1", "app:app"]