Update Dockerfile

Dockerfile

@@ -1,20 +1,44 @@
 FROM python:3.13.5-slim
 
-WORKDIR /app
-
 RUN apt-get update && apt-get install -y \
     build-essential \
     curl \
     git \
     && rm -rf /var/lib/apt/lists/*
 
-COPY requirements.txt ./
-COPY src/ ./src/
+# COPY requirements.txt ./
+# COPY src/ ./src/
+# COPY database_telemetry.db ./src/
+# COPY langgraph_init.py ./src/
+# COPY config.py ./src/
+# COPY config.py ./src/
+
+# ✅ Prevent Streamlit from writing to root
+ENV STREAMLIT_HOME=/tmp/.streamlit
+ENV STREAMLIT_BROWSER_GATHER_USAGE_STATS=false
+
+# Hugging Face cache paths (redirect to /tmp)
+ENV HF_HOME=/tmp/huggingface
+
+# Set up user and environment
+RUN useradd -m -u 1000 user
+USER user
+ENV HOME=/home/user \
+    PATH="/home/user/.local/bin:$PATH"
+
+WORKDIR $HOME/app
+
+COPY --chown=user requirements.txt .
+COPY --chown=user src/ ./src/
+COPY --chown=user Db_domain_agent.db ./src/
+COPY --chown=user mydomain_agent.py ./src/
+COPY --chown=user domain_index_sec.faiss ./src/
+RUN pip install --no-cache-dir --upgrade -r requirements.txt
 
-RUN pip3 install -r requirements.txt
+COPY --chown=user . .
 
 EXPOSE 8501
 
 HEALTHCHECK CMD curl --fail http://localhost:8501/_stcore/health
 
-ENTRYPOINT ["streamlit", "run", "src/streamlit_app.py", "--server.port=8501", "--server.address=0.0.0.0"]
+ENTRYPOINT ["streamlit", "run", "src/streamlit_app.py", "--server.port=8501", "--server.address=0.0.0.0","--server.enableXsrfProtection=false","--server.enableCORS=false"]