Update Dockerfile

Dockerfile

@@ -1,28 +1,13 @@
 # Use the official Python 3.9 image
 FROM python:3.9
 
-# Set up a new user named "user" with user ID 1000
-# Hugging Face Spaces recommends running as a non-root user for security
-RUN useradd -m -u 1000 user
-
-# Switch to the "user" user
-USER user
-
-# Set environment variables
-ENV HOME=/home/user \
-	PATH=/home/user/.local/bin:$PATH
-
-# Set the working directory to the user's home folder
-WORKDIR $HOME/app
-
-# Install system dependencies
+# 1. Set up system dependencies as ROOT (default)
 RUN apt-get update && apt-get install -y \
     curl \
     ca-certificates \
-    # lklklkl
     && rm -rf /var/lib/apt/lists/*
 
-# Install cloudflared (NO sudo, NO service install)
+# 2. Install cloudflared as ROOT
 RUN curl -fsSL https://pkg.cloudflare.com/cloudflare-public-v2.gpg \
     | tee /usr/share/keyrings/cloudflare-public-v2.gpg >/dev/null && \
     echo "deb [signed-by=/usr/share/keyrings/cloudflare-public-v2.gpg] https://pkg.cloudflare.com/cloudflared any main" \
@@ -31,16 +16,24 @@ RUN curl -fsSL https://pkg.cloudflare.com/cloudflare-public-v2.gpg \
     apt-get install -y cloudflared && \
     rm -rf /var/lib/apt/lists/*
 
+# 3. Now create the user and set up the environment
+RUN useradd -m -u 1000 user
+ENV HOME=/home/user \
+    PATH=/home/user/.local/bin:$PATH
 
-# Copy the current directory contents into the container at $HOME/app
-# We use --chown=user to ensure the new user owns these files
-COPY --chown=user . $HOME/app
+WORKDIR $HOME/app
 
-# Install requirements
+# 4. Switch to the non-root user for app-specific tasks
+USER user
+
+# 5. Copy files and install Python requirements
+COPY --chown=user . $HOME/app
 RUN pip install --no-cache-dir --upgrade -r requirements.txt
 
-# Expose the port Hugging Face expects (7860)
+# Expose port
 EXPOSE 7860
 
-# Run the application
-CMD cloudflared tunnel run --token $CLOUDFLARED_TOKEN & python app.py
+# 6. Run the application
+# Note: Using '&&' instead of '&' ensures the tunnel starts before the app, 
+# or use a shell script if you need them to run truly in parallel.
+CMD cloudflared tunnel run --token $CLOUDFLARED_TOKEN & python app.py