Update Dockerfile

Dockerfile

@@ -1,36 +1,24 @@
 FROM python:3.9-slim
 
-# 1) Prevent .pyc and buffer stdout
-ENV PYTHONDONTWRITEBYTECODE=1 \
-    PYTHONUNBUFFERED=1 \
-    # 2) Redirect HF & transformers cache to a writable folder
-    XDG_CACHE_HOME=/app/.cache \
-    HF_HOME=/app/.cache/huggingface
-
 WORKDIR /app
 
-# 3) System deps for building & image processing
-RUN apt-get update && apt-get install -y \
-    build-essential \
-    libgl1-mesa-glx \
- && rm -rf /var/lib/apt/lists/* \
- # 4) Make cache dirs and set perms
- && mkdir -p /app/.cache/huggingface \
- && chmod -R 777 /app/.cache
-
-# 5) Copy & install python deps
-COPY requirements.txt .
-RUN pip install --upgrade pip \
- && pip install --no-cache-dir -r requirements.txt
+# Copy and install requirements
+COPY requirements.txt /app/requirements.txt
+RUN pip install --no-cache-dir --upgrade -r /app/requirements.txt
 
-COPY . .
+# Set up a new non-root user
+RUN useradd -m -u 1000 user
+USER user
+ENV HOME=/home/user
+ENV PATH=/home/user/.local/bin:$PATH
 
-EXPOSE 7860
+# Create a cache directory and set environment variable
+RUN mkdir -p /home/user/.cache && chown -R user:user /home/user/.cache
+ENV HF_HOME=/home/user/.cache
 
-# 6) (Optional) Pre-download the embedding model at build time
-RUN python - <<’EOF’
-from sentence_transformers import SentenceTransformer
-SentenceTransformer("sentence-transformers/all-mpnet-base-v2")
-EOF
+# Set working directory to the user's app directory
+WORKDIR $HOME/app
+COPY --chown=user . $HOME/app
 
-CMD ["gunicorn", "app:app", "--bind", "0.0.0.0:7860", "--workers", "4"]
+EXPOSE 7860
+CMD ["gunicorn", "--bind", "0.0.0.0:7860", "app:app"]