Update Dockerfile

Dockerfile

@@ -2,14 +2,21 @@ FROM python:3.11-slim
 
 WORKDIR /app
 
-# Create directories and set proper permissions
-RUN mkdir -p /tmp/.streamlit /tmp/.config/matplotlib && \
-    chmod 777 /tmp/.streamlit /tmp/.config/matplotlib
+# Create a non-root user
+RUN useradd -m -u 1000 streamlit
 
-# Set environment variables for writable directories
+# Create directories with proper ownership
+RUN mkdir -p /tmp/.streamlit /tmp/.config/matplotlib /app/uploads && \
+    chown -R streamlit:streamlit /tmp/.streamlit /tmp/.config/matplotlib /app && \
+    chmod -R 755 /tmp/.streamlit /tmp/.config/matplotlib /app
+
+# Set environment variables
 ENV HOME=/tmp
 ENV STREAMLIT_CONFIG_DIR=/tmp/.streamlit
 ENV MPLCONFIGDIR=/tmp/.config/matplotlib
+ENV STREAMLIT_SERVER_MAX_UPLOAD_SIZE=200
+ENV STREAMLIT_SERVER_ENABLE_CORS=false
+ENV STREAMLIT_SERVER_ENABLE_XSRF_PROTECTION=false
 
 # Install system dependencies
 RUN apt-get update && apt-get install -y \
@@ -28,13 +35,27 @@ RUN pip3 install -r requirements.txt
 
 # Copy source code
 COPY src/ ./src/
+RUN chown -R streamlit:streamlit /app
+
+# Switch to non-root user
+USER streamlit
 
 EXPOSE 8501
 
 HEALTHCHECK CMD curl --fail http://localhost:8501/_stcore/health
 
-# Disable Streamlit usage stats collection and set server config
+# Create Streamlit config file
+RUN echo '[server]\n\
+maxUploadSize = 200\n\
+enableCORS = false\n\
+enableXsrfProtection = false\n\
+\n\
+[browser]\n\
+gatherUsageStats = false\n\
+\n\
+[theme]\n\
+base = "light"' > /tmp/.streamlit/config.toml
+
 ENTRYPOINT ["streamlit", "run", "src/streamlit_app.py", \
            "--server.port=8501", \
-           "--server.address=0.0.0.0", \
-           "--browser.gatherUsageStats=false"]
+           "--server.address=0.0.0.0"]