Update Dockerfile

Dockerfile

@@ -1,6 +1,7 @@
 ARG PYTHON_VERSION=3.12.1
 FROM python:${PYTHON_VERSION}-slim AS base
 
+# Install system dependencies
 RUN apt-get update && \
     apt-get install -y pipenv && \
     apt-get install -y \
@@ -13,22 +14,34 @@ RUN apt-get update && \
     git && \
     rm -rf /var/lib/apt/lists/*
 
+# Set environment variables
 ENV PORT=7860
-
 ENV PIPENV_VENV_IN_PROJECT=1
 
-WORKDIR /app
+# Create a non-root user and group
+RUN groupadd -g 1000 appuser && \
+    useradd -m -u 1000 -g appuser appuser
 
-# COPY requirements.txt .
+# Set the working directory and adjust permissions
+WORKDIR /app
+RUN chown -R appuser:appuser /app
 
-# RUN pipenv install --dev --ignore-pipfile
+# Switch to the non-root user
+USER appuser
 
-COPY . .
+# Copy application code
+COPY --chown=appuser:appuser . .
 
-EXPOSE 7860
+# Install dependencies
+RUN pipenv install --dev --ignore-pipfile
 RUN pipenv run pip install -U pydantic
 RUN pipenv run pip install asyncio fastapi uvicorn requests cloudinary genshin
 RUN pipenv run pip install git+https://github.com/Akane7101/enkacard
 RUN pipenv run pip install git+https://github.com/Akane7101/StarRailCard
 RUN pipenv run pip install git+https://github.com/Akane7101/EnkaNetwork.py
-CMD [ "pipenv", "run", "python", "-m", "uvicorn", "main:app", "--host", "0.0.0.0", "--port", "7860", "--workers", "8", "--timeout-keep-alive", "600" ]
+
+# Expose the application port
+EXPOSE 7860
+
+# Command to run the application
+CMD ["pipenv", "run", "python", "-m", "uvicorn", "main:app", "--host", "0.0.0.0", "--port", "7860", "--workers", "8", "--timeout-keep-alive", "600"]