Add HF_HOME and finalize non-root Dockerfile

Dockerfile

@@ -1,28 +1,30 @@
 FROM python:3.10-slim
 
-
-# Add required system tools for Hugging Face Dev Mode
+# 1) System tools for HF Dev Mode
 RUN apt-get update && apt-get install -y git wget && rm -rf /var/lib/apt/lists/*
 
-# Preconfigure Git globally (system-wide to avoid permission issues)
+# 2) Preconfigure Git (system-wide to avoid permission issues)
 RUN git config --system user.email "366degrees@users.noreply.huggingface.co" && \
     git config --system user.name "366degrees"
 
-
-# Create and switch to /app
+# 3) Create app dir, copy code, set owner
 WORKDIR /app
+COPY . /app
+RUN useradd -m appuser && chown -R appuser:appuser /app
 
-# Copy all repo files into /app
-ADD . /app
-
-# Install dependencies
+# 4) Python deps
 RUN pip install --no-cache-dir -r requirements.txt
 
-# Expose Hugging Face port
+# 5) Hugging Face cache (writeable in containers)
+ENV HF_HOME=/tmp/huggingface
+RUN mkdir -p /tmp/huggingface
+
+# 6) Port + Dev Mode gitconfig fix
 EXPOSE 7860
+RUN touch /.gitconfig && chmod 666 /.gitconfig
 
-# Environment variables for HF cache
-ENV HF_HOME=/tmp/huggingface
+# 7) Switch to non-root for runtime
+USER appuser
 
-# Use Gunicorn (production WSGI server)
+# 8) Start server (Gunicorn)
 CMD ["gunicorn", "--bind", "0.0.0.0:7860", "api_inference:app"]