Add application file

Dockerfile

@@ -2,21 +2,6 @@ FROM python:3.9-slim
 
 WORKDIR /app
 
-# Cài đặt các dependencies cần thiết
-RUN apt-get update && apt-get install -y \
-    build-essential \
-    git \
-    && rm -rf /var/lib/apt/lists/*
-
-# Tạo các thư mục cần thiết và cấp quyền
-RUN mkdir -p /app/data /app/temp /tmp/huggingface-cache && \
-    chmod -R 777 /app/data /app/temp /tmp/huggingface-cache && \
-    chown -R 1000:1000 /app/data /app/temp /tmp/huggingface-cache
-
-ENV TRANSFORMERS_CACHE=/tmp/huggingface-cache
-ENV HF_HOME=/tmp/huggingface-cache
-ENV HF_DATASETS_CACHE=/tmp/huggingface-cache
-
 # Copy requirements first for better caching
 COPY requirements.txt .
 
@@ -26,6 +11,16 @@ RUN pip install --no-cache-dir -r requirements.txt
 # Copy the rest of the application
 COPY . .
 
+# Create necessary directories with proper permissions
+RUN mkdir -p /app/data /app/temp /tmp/huggingface-cache && \
+    chmod -R 777 /app/data /app/temp /tmp/huggingface-cache && \
+    chown -R 1000:1000 /app/data /app/temp /tmp/huggingface-cache
+
+# Set environment variables for cache locations
+ENV TRANSFORMERS_CACHE=/tmp/huggingface-cache
+ENV HF_HOME=/tmp/huggingface-cache
+ENV SENTENCE_TRANSFORMERS_HOME=/tmp/huggingface-cache
+
 # Expose the port that the app will run on
 EXPOSE 7860
 
@@ -34,5 +29,9 @@ ENV PYTHONUNBUFFERED=1
 ENV HOST=0.0.0.0
 ENV PORT=7860
 
+# Switch to non-root user for better security
+RUN useradd -m -u 1000 appuser
+USER appuser
+
 # Command to run the application
 CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "7860"]