Update Dockerfile

Dockerfile

@@ -6,7 +6,7 @@ WORKDIR /usr/src/app
 
 # Copy and install dependencies
 COPY requirements.txt ./
-RUN pip install --no-cache-dir -r requirements.txt
+RUN pip install -q --no-cache-dir -r requirements.txt
 
 # Copy the application source code
 COPY . .
@@ -21,25 +21,28 @@ FROM python:3.11.4-slim
 
 WORKDIR /usr/src/app
 
-# Create a non-root user for enhanced security
-RUN useradd --create-home appuser
-
-# Copy the compiled .pyc files and other assets
+# Copy the compiled .pyc files and other assets from the builder stage
 COPY --from=builder /usr/src/app/*.pyc .
 COPY --from=builder /usr/src/app/templates ./templates
 COPY --from=builder /usr/src/app/requirements.txt .
 
-# --- THIS IS THE KEY FIX FOR PERMISSIONERROR ---
+# --- THIS IS THE KEY FIX FOR THE PATH ERROR ---
+# Install dependencies as the ROOT user first.
+# This ensures executables like 'gunicorn' are installed in a system-wide
+# directory (e.g., /usr/local/bin) that is in the default $PATH.
+RUN pip install -q --no-cache-dir -r requirements.txt
+
+# Now, create the non-root user for running the application
+RUN useradd --create-home appuser
+
 # Change the ownership of the entire app directory to our new user.
-# This allows the user to write files like client_secrets.json and token.json.
+# This allows the app to write files like client_secrets.json and token.json.
 RUN chown -R appuser:appuser /usr/src/app
 
-# Switch to the non-root user BEFORE installing final packages and running the app
+# Switch to the non-root user for running the application.
+# This is the final security step before execution.
 USER appuser
 
-# Install the runtime dependencies into the final image
-RUN pip install --no-cache-dir -r requirements.txt
-
 # The command to run the application.
-# It will listen on the port Hugging Face provides (usually 7860) via the $PORT variable.
-CMD ["gunicorn", "app:app", "--bind", "0.0.0.0:7860"]
+# Gunicorn is now in the $PATH, and the 'appuser' has permission to run it.
+CMD ["gunicorn", "app:app", "--bind", "0.0.0.0:$PORT"]