Update Dockerfile

Dockerfile

@@ -1,19 +1,39 @@
+# Use a slim Python base image
 FROM python:3.9-slim
 
-WORKDIR /app
+# Install system build deps (adjust if you know you don't need them)
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends \
+        build-essential \
+        gcc \
+        libgomp1 \
+        git && \
+    rm -rf /var/lib/apt/lists/*
+
+# Prevent Python from writing .pyc files and enable unbuffered logging
+ENV PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1
 
-RUN apt-get update && apt-get install -y libgl1 libglib2.0-0 && rm -rf /var/lib/apt/lists/*
+WORKDIR /app
 
-RUN mkdir -p /app/.u2net && chmod 777 /app/.u2net
+# Copy only requirements first to leverage Docker cache
+COPY requirements.txt /app/requirements.txt
 
-ENV U2NET_HOME=/app/.u2net
-ENV NUMBA_CACHE_DIR=/tmp
-# ENV NUMBA_DISABLE_JIT=1
+# Install Python packages globally (as root)
+RUN pip install --no-cache-dir --upgrade pip && \
+    pip install --no-cache-dir -r /app/requirements.txt
 
-COPY requirements.txt .
+# Create a non-root user and switch to it
+RUN useradd -m -u 1000 user
+USER user
+ENV PATH="/home/user/.local/bin:$PATH"
 
-RUN pip install --no-cache-dir -r requirements.txt
+# Copy application code as the non-root user
+COPY --chown=user:root . /app
 
-COPY . .
+# Expose the port expected by Hugging Face Spaces (7860)
+EXPOSE 7860
 
-CMD ["gunicorn", "-k", "uvicorn.workers.UvicornWorker", "--bind", "0.0.0.0:7860", "api:app"]
+# Run uvicorn pointing at your FastAPI app.
+# Note: your FastAPI app instance is `app` in `backend.py`, so we use `backend:app`.
+CMD ["uvicorn", "api:app", "--host", "0.0.0.0", "--port", "7860"]