update dockerfile

Dockerfile

@@ -1,7 +1,26 @@
 FROM ghcr.io/astral-sh/uv:python3.11-bookworm-slim
-COPY . /sr_api
-WORKDIR /sr_api
-RUN apt-get update && apt-get install ffmpeg libsm6 libxext6 redis -y && pip install -r requirements.txt
+
+RUN useradd -m -u 1000 user
+
+USER user
+
+ENV HOME=/home/user \
+    PATH=/home/user/.local/bin:$PATH
+
+WORKDIR $HOME/sr_api
+
+RUN pip install --no-cache-dir --upgrade pip
+
+COPY --chown=user . $HOME/sr_api
+
+USER root
+
+RUN apt-get update && apt-get install -y ffmpeg libsm6 libxext6 redis && \
+    apt-get clean && rm -rf /var/lib/apt/lists/*
+
 COPY start.sh /start.sh
-RUN chmod +x /start.sh
-ENTRYPOINT ["/start.sh"]
+RUN chown user:user /start.sh && chmod +x /start.sh
+
+USER user
+
+ENTRYPOINT ["/start.sh"]