Update Dockerfile

Dockerfile

@@ -3,14 +3,9 @@
 FROM n8nio/n8n:latest
 
 # Set environment variables for n8n
-# N8N_HOST tells n8n to bind to all available network interfaces within the container.
 ENV N8N_HOST="0.0.0.0"
-# N8N_PORT tells n8n which port to listen on. Hugging Face Spaces requires 7860.
 ENV N8N_PORT=7860
-# Optional: Set your timezone. Replace "UTC" with your desired timezone, e.g., "Europe/Berlin".
-# A list of tz database time zones can be found here: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones
 ENV GENERIC_TIMEZONE="UTC"
-# Disable telemetry if you prefer
 # ENV N8N_DIAGNOSTICS_ENABLED=false
 
 # Create a working directory
@@ -18,12 +13,22 @@ WORKDIR /app
 
 # Copy the startup script into the container
 COPY start.sh .
+
+# Switch to root to change permissions
+USER root
 # Make the startup script executable
 RUN chmod +x ./start.sh
+# It's good practice to switch back to the image's default user if you know it,
+# but for n8n, the entrypoint/cmd will likely run as the correct user anyway.
+# If you knew the n8n user (e.g., 'node' or 'n8n'), you could add: USER n8n_user
+# For now, let's assume the n8n image handles user context correctly for its main process.
+# If the image has a specific non-root user set by default (e.g. 'node'),
+# it might be good to revert to it:
+# USER node
+# However, the n8n base image should handle its runtime user context correctly after this.
 
 # Expose the port. Hugging Face Spaces will use this port based on the README.md app_port metadata.
 EXPOSE 7860
 
 # Set the startup script as the command to run when the container starts.
-# This script will configure WEBHOOK_URL using SPACE_HOST and then execute n8n.
 CMD ["./start.sh"]