Update Dockerfile

Dockerfile

@@ -8,27 +8,24 @@ ENV N8N_PORT=7860
 ENV GENERIC_TIMEZONE="UTC"
 # ENV N8N_DIAGNOSTICS_ENABLED=false
 
-# Create a working directory
-WORKDIR /app
+# Tell n8n to automatically enforce correct permissions for its settings file
+ENV N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=true
 
-# Copy the startup script into the container
-COPY start.sh .
+# Create a working directory (good practice, though n8n uses /home/node/.n8n for data)
+WORKDIR /app
 
-# Switch to root to change permissions
-USER root
-# Make the startup script executable
-RUN chmod +x ./start.sh
-# It's good practice to switch back to the image's default user if you know it,
-# but for n8n, the entrypoint/cmd will likely run as the correct user anyway.
-# If you knew the n8n user (e.g., 'node' or 'n8n'), you could add: USER n8n_user
-# For now, let's assume the n8n image handles user context correctly for its main process.
-# If the image has a specific non-root user set by default (e.g. 'node'),
-# it might be good to revert to it:
-# USER node
-# However, the n8n base image should handle its runtime user context correctly after this.
+# Copy the startup script into the container and set its permissions.
+# Using an absolute path for the destination is a bit more robust.
+COPY --chmod=0755 start.sh /app/start.sh
 
 # Expose the port. Hugging Face Spaces will use this port based on the README.md app_port metadata.
 EXPOSE 7860
 
-# Set the startup script as the command to run when the container starts.
-CMD ["./start.sh"]
+# Set our start.sh script as the entrypoint.
+# This script is responsible for setting up necessary environment variables
+# and then executing the main n8n process.
+ENTRYPOINT ["/app/start.sh"]
+
+# CMD is not strictly needed here if start.sh takes no arguments,
+# or you can leave it as CMD [] if you prefer.
+# The base n8n image's CMD would be overridden by this ENTRYPOINT.