dock

Dockerfile

@@ -1,22 +1,34 @@
 FROM python:3.10-slim
+
+# Install required system packages
 RUN apt update && apt install -y \
     git \
     libgl1 \
     libglib2.0-0 \
     && apt clean
+
+# Set working directory
 WORKDIR /app
 
-# Install dependencies
+# Install Python dependencies
 COPY requirements.txt .
 RUN pip install --no-cache-dir -r requirements.txt
 
 # Copy the entire project directory
 COPY . .
 
-# Create tmp directory with write permissions
-RUN mkdir -p /app/tmp && chmod 777 /app/tmp
+# Create tmp and output directories with full permissions
+RUN mkdir -p /app/tmp /app/output && \
+    chmod 777 /app/tmp /app/output
+
+# Create a non-root user and set ownership
+RUN useradd -m -u 1000 appuser && \
+    chown -R appuser:appuser /app
+
+# Switch to non-root user
+USER appuser
 
-# Expose the port Hugging Face Spaces expects
+# Expose the port for FastAPI (Hugging Face Spaces)
 EXPOSE 7860
 
 # Start the FastAPI app