Update Dockerfile

Dockerfile

@@ -1,13 +1,13 @@
-# Use a small Debian-based Python image
+# Dockerfile
 FROM python:3.9-slim
 
-# create non-root user (optional)
-RUN useradd -m -u 1000 user
-WORKDIR /app
+# avoid interactive prompts during apt installs
+ENV DEBIAN_FRONTEND=noninteractive
+ENV CHROME_BIN=/usr/bin/google-chrome-stable
 
-# Install system packages required by Chrome + basic tools
-# Install gnupg so we can add the Google signing key via gpg --dearmor
-RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
+# Install system deps required for Chrome + basic tools and GPG for the key
+RUN apt-get update \
+ && apt-get install -y --no-install-recommends \
     ca-certificates \
     wget \
     gnupg \
@@ -25,26 +25,34 @@ RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-ins
     libxrandr2 \
     libgbm1 \
     xdg-utils \
-    wget \
-    && rm -rf /var/lib/apt/lists/*
+    libxrender1 \
+    libxext6 \
+    libxshmfence1 \
+    libglib2.0-0 \
+ && rm -rf /var/lib/apt/lists/*
 
-# Add Google Chrome stable repository (secure method using signed-by keyring)
-RUN wget -q -O - https://dl-ssl.google.com/linux/linux_signing_key.pub | gpg --dearmor \
-    > /usr/share/keyrings/google-linux-signing-key.gpg \
-    && echo "deb [arch=amd64 signed-by=/usr/share/keyrings/google-linux-signing-key.gpg] http://dl.google.com/linux/chrome/deb/ stable main" \
+# Add Google Chrome repo key and install stable Chrome (use signed-by)
+RUN wget -q -O - https://dl.google.com/linux/linux_signing_key.pub \
+    | gpg --dearmor -o /usr/share/keyrings/google-chrome.gpg \
+ && echo "deb [arch=amd64 signed-by=/usr/share/keyrings/google-chrome.gpg] http://dl.google.com/linux/chrome/deb/ stable main" \
     > /etc/apt/sources.list.d/google-chrome.list \
-    && apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends google-chrome-stable \
-    && rm -rf /var/lib/apt/lists/*
+ && apt-get update \
+ && apt-get install -y --no-install-recommends google-chrome-stable \
+ && rm -rf /var/lib/apt/lists/*
 
-# Expose CHROME_BIN to the app (used by app.py)
-ENV CHROME_BIN=/usr/bin/google-chrome-stable
+WORKDIR /app
 
 # Copy and install Python dependencies
-COPY requirements.txt ./requirements.txt
-RUN pip install --no-cache-dir --upgrade -r requirements.txt
+COPY requirements.txt /app/requirements.txt
+RUN pip install --no-cache-dir --upgrade pip \
+ && pip install --no-cache-dir -r /app/requirements.txt
 
-# Copy app
+# Copy app code
 COPY . /app
 
-# Ensure the entrypoint runs uvicorn; run as root (if you want non-root, adjust flags)
+# Expose port (customize if needed)
+EXPOSE 7860
+
+# Run as root (simplifies running chrome in containers). If you want non-root,
+# create a user and adapt permissions / flags accordingly.
 CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]