Update Dockerfile

Dockerfile

@@ -1,5 +1,8 @@
 FROM python:3.11-slim
 
+# Create non-root user
+RUN useradd --create-home --shell /bin/bash app_user
+
 # Set working directory
 WORKDIR /app
 
@@ -7,6 +10,11 @@ WORKDIR /app
 ENV PYTHONUNBUFFERED=1
 ENV PYTHONDONTWRITEBYTECODE=1
 ENV PYTHONPATH=/app
+ENV STREAMLIT_SERVER_HEADLESS=true
+ENV STREAMLIT_SERVER_PORT=7860
+ENV STREAMLIT_SERVER_ADDRESS=0.0.0.0
+ENV MPLCONFIGDIR=/tmp/matplotlib
+ENV STREAMLIT_CONFIG_DIR=/tmp/.streamlit
 
 # Install system dependencies
 RUN apt-get update && apt-get install -y \
@@ -14,25 +22,23 @@ RUN apt-get update && apt-get install -y \
     g++ \
     && rm -rf /var/lib/apt/lists/*
 
-# Copy and install requirements first (for better caching)
+# Copy requirements and install as root
 COPY requirements.txt .
-RUN pip install --no-cache-dir --upgrade pip setuptools wheel && \
+RUN pip install --no-cache-dir --upgrade pip && \
     pip install --no-cache-dir -r requirements.txt
 
-# Copy ALL files (this ensures both .py files are copied)
+# Copy application files
 COPY . .
 
-# Ensure files have correct permissions
-RUN chmod +r *.py
-
-# Debug: Show what files we have
-RUN echo "Files in /app:" && ls -la /app/
+# Create necessary directories with proper permissions
+RUN mkdir -p /tmp/.streamlit /tmp/matplotlib /app/temp && \
+    chown -R app_user:app_user /app /tmp/.streamlit /tmp/matplotlib
 
-# Create necessary directories
-RUN mkdir -p /app/temp /app/analysis_output
+# Switch to non-root user
+USER app_user
 
 # Expose port
 EXPOSE 7860
 
-# Run Streamlit with explicit file path
-CMD ["python", "-m", "streamlit", "run", "/app/app.py", "--server.port=7860", "--server.address=0.0.0.0", "--server.headless=true", "--server.enableCORS=false", "--server.enableXsrfProtection=false"]
+# Run Streamlit
+CMD ["streamlit", "run", "app.py", "--server.port=7860", "--server.address=0.0.0.0", "--server.headless=true", "--server.enableCORS=false", "--server.enableXsrfProtection=false"]