Update Dockerfile

Dockerfile

@@ -1,31 +1,34 @@
 # Use an official lightweight Python image.
-# 3.11 is stable and faster than previous versions.
 FROM python:3.11-slim
 
 # Set environment variables
-# PYTHONDONTWRITEBYTECODE: Prevents Python from writing pyc files to disc
-# PYTHONUNBUFFERED: Prevents Python from buffering stdout and stderr
 ENV PYTHONDONTWRITEBYTECODE=1
 ENV PYTHONUNBUFFERED=1
 
+# Create a non-root user (Recommended for HF Spaces security permissions)
+RUN useradd -m -u 1000 user
+USER user
+ENV PATH="/home/user/.local/bin:$PATH"
+
 # Set the working directory in the container
 WORKDIR /app
 
 # Copy the requirements file first to leverage Docker cache
-COPY requirements.txt .
+# Note the --chown flag to ensure the non-root user owns the files
+COPY --chown=user ./requirements.txt requirements.txt
 
 # Install dependencies
-RUN pip install --no-cache-dir -r requirements.txt
+RUN pip install --no-cache-dir --upgrade -r requirements.txt
 
 # Copy the rest of the application code
-COPY . .
+COPY --chown=user . /app
 
-# Expose the port Streamlit runs on
-EXPOSE 8501
+# Expose the port strictly required by Hugging Face Spaces
+EXPOSE 7860
 
-# Healthcheck to ensure the container is responsive
-HEALTHCHECK CMD curl --fail http://localhost:8501/_stcore/health || exit 1
+# Healthcheck updated to check the correct port
+HEALTHCHECK CMD curl --fail http://localhost:7860/_stcore/health || exit 1
 
 # Command to run the application
-# server.address=0.0.0.0 is crucial for Docker networking
-CMD ["streamlit", "run", "app.py", "--server.address=0.0.0.0", "--server.enableCORS=false", "--server.enableXsrfProtection=false"]
+# Note the addition of --server.port=7860
+CMD ["streamlit", "run", "app.py", "--server.address=0.0.0.0", "--server.port=7860"]