Update Dockerfile

Dockerfile

@@ -8,14 +8,28 @@ RUN apt-get update && apt-get install -y \
     git \
     && rm -rf /var/lib/apt/lists/*
 
-COPY requirements.txt ./
-COPY src/ ./src/
+# Create a non-root user
+RUN useradd -ms /bin/bash appuser
+USER appuser
 
-RUN pip install --no-cache-dir -r requirements.txt
+# Set Hugging Face & Streamlit cache dirs to user-writable locations
+ENV TRANSFORMERS_CACHE=/app/.cache/huggingface/transformers
+ENV HF_HOME=/app/.cache/huggingface
+ENV XDG_CACHE_HOME=/app/.cache
+ENV STREAMLIT_HOME=/app/.streamlit
+
+# Make directories
+RUN mkdir -p $TRANSFORMERS_CACHE $HF_HOME $XDG_CACHE_HOME $STREAMLIT_HOME
 
+# Copy code
+COPY --chown=appuser:appuser requirements.txt ./
+COPY --chown=appuser:appuser src/ ./src/
+
+# Install dependencies
+RUN pip install --no-cache-dir -r requirements.txt
 
 EXPOSE 8501
 
-HEALTHCHECK CMD curl --fail http://localhost:8501/_stcore/health
+HEALTHCHECK CMD curl --fail http://localhost:8501/_stcore/health || exit 1
 
-ENTRYPOINT ["streamlit", "run", "src/app.py", "--server.port=8501", "--server.address=0.0.0.0"]
+ENTRYPOINT ["streamlit", "run", "src/app.py", "--server.port=8501", "--server.address=0.0.0.0"]