# Minimal upstream HTTP/1.1 server for CVE-2024-53271.
# Pure stdlib raw-socket server; no third-party packages needed.
FROM python:3.12-slim

WORKDIR /app
COPY config/upstream.py /app/upstream.py

# MODE (trigger|plain) and PORT are supplied per-service in docker-compose.
ENV PORT=8080
EXPOSE 8080
CMD ["python3", "/app/upstream.py"]