1# Use an official Python runtime as a parent image (Alpine-based for minimal vulnerabilities)
2FROM python:3.13-alpine
3 
4# Set the working directory in the container
5WORKDIR /app
6 
7# Prevent Python from writing pyc files to disc
8ENV PYTHONDONTWRITEBYTECODE=1
9# Ensure Python output is sent straight to terminal (useful for logs)
10ENV PYTHONUNBUFFERED=1
11 
12# Install system dependencies if needed (e.g., for certain Python packages)
13# RUN apt-get update && apt-get install -y --no-install-recommends some-package && rm -rf /var/lib/apt/lists/*
14 
15# Copy dependency definition files
16# If using Poetry:
17# COPY pyproject.toml poetry.lock* ./
18# RUN pip install --no-cache-dir poetry
19# RUN poetry config virtualenvs.create false && poetry install --no-dev --no-interaction --no-ansi
20# If using pip with requirements.txt:
21COPY requirements.txt ./
22RUN pip install --no-cache-dir --upgrade pip
23RUN pip install --no-cache-dir -r requirements.txt
24 
25# Copy the rest of the application code
26COPY main.py .
27# COPY session_string_generator.py . # Optional: if needed within the container, otherwise can be run outside
28 
29# Create a non-root user and switch to it
30RUN adduser --disabled-password --gecos "" appuser && chown -R appuser:appuser /app
31USER appuser
32 
33# Define environment variables needed by the application
34# These should be provided at runtime, not hardcoded (especially secrets)
35ENV TELEGRAM_API_ID=""
36ENV TELEGRAM_API_HASH=""
37# Specify one of the following at runtime:
38# Default session filename
39ENV TELEGRAM_SESSION_NAME="telegram_mcp_session"
40# Or provide the session string directly
41ENV TELEGRAM_SESSION_STRING=""
42 
43# Expose any ports if the application were a web server (not needed for stdio MCP)
44# EXPOSE 8000
45 
46# Define the command to run the application
47CMD ["python", "main.py"]