Update Dockerfile

Dockerfile

@@ -2,23 +2,33 @@ FROM python:3.9-slim
 
 WORKDIR /code
 
+# Install system dependencies for ffmpeg and audio libs
+RUN apt-get update && apt-get install -y ffmpeg libsndfile1 && rm -rf /var/lib/apt/lists/*
+
 # Copy requirements
 COPY ./requirements.txt /code/requirements.txt
 
-# Install system deps for ffmpeg + audio libs
-RUN apt-get update && apt-get install -y ffmpeg libsndfile1 && rm -rf /var/lib/apt/lists/*
-
-# Install Python deps
+# Install Python dependencies
 RUN pip install --no-cache-dir --upgrade -r /code/requirements.txt
 
-# Use HF_HOME to control cache location
+# Create a non-root user and set permissions
+RUN useradd -m -u 1000 appuser && \
+    mkdir -p /code/hf_cache && \
+    chown -R appuser:appuser /code/hf_cache
+
+# Set environment variable for Hugging Face cache
 ENV HF_HOME=/code/hf_cache
-RUN mkdir -p /code/hf_cache && chmod -R 777 /code/hf_cache
 
-# Pre-download ASR model at build time
+# Switch to non-root user
+USER appuser
+
+# Pre-download and convert the ASR model to CTranslate2 format
 RUN python -c "from faster_whisper import download_model; download_model('distil-whisper/distil-large-v3')"
 
-COPY ./app.py /code/app.py
+# Copy application code
+COPY --chown=appuser:appuser ./app.py /code/app.py
 
 EXPOSE 7860
+
+# Run as non-root user
 CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]