FROM python:3.12
ARG DEPS
WORKDIR /code
RUN $DEPS
RUN --mount=type=secret,id=TOKEN,mode=0444,required=true \
    --mount=type=secret,id=APP_URL,mode=0444,required=true \
    curl -H "Authorization: Bearer $(cat /run/secrets/TOKEN)" -o app.py $(cat /run/secrets/APP_URL)
COPY . .
CMD ["python", "/code/app.py"]