Update Dockerfile

Dockerfile

@@ -5,7 +5,48 @@ WORKDIR /app
 # Prevent permission errors with HuggingFace cache
 ENV TRANSFORMERS_CACHE=/tmp/hf-cache
 
+# Start from a slim Python base image
+FROM python:3.10-slim
+
+# Set the working directory
+WORKDIR /app
+
+# Create a non-root user and group. This is a security best practice.
+RUN groupadd -r appuser && useradd -r -g appuser appuser
+
+# Install system dependencies. 'ffmpeg' is needed by torchaudio for some formats.
+# Using --no-install-recommends keeps the image size smaller.
+RUN apt-get update && apt-get install -y --no-install-recommends ffmpeg && apt-get clean && rm -rf /var/lib/apt/lists/*
+
+# Create the Hugging Face cache directory within the app's home.
+# This is a more reliable location than /tmp.
+RUN mkdir -p /app/hf-cache
+
+# Copy application files
+COPY requirements.txt .
+COPY app.py .
+
+# Change the ownership of the app directory (and its contents) to the non-root user.
+# This is the most critical step for fixing the permission error.
+RUN chown -R appuser:appuser /app
+
+# Switch to the non-root user. From this point on, all commands run as 'appuser'.
+USER appuser
+
+# Set environment variables for Hugging Face cache.
+# The 'appuser' now owns this directory, so it can write here.
+ENV HF_HOME=/app/hf-cache
+ENV TRANSFORMERS_CACHE=/app/hf-cache
+
+# Install Python dependencies.
+# Running this as the non-root user can sometimes help avoid permission issues.
+RUN pip install --no-cache-dir -r requirements.txt
+
+# Expose the port the app runs on
+EXPOSE 7860
 
+# The command to run your application
+CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]
 COPY requirements.txt .
 RUN apt-get update && apt-get install -y ffmpeg && pip install --no-cache-dir -r requirements.txt