Update Dockerfile

Dockerfile

@@ -1,5 +1,6 @@
 FROM python:3.11-slim
 
+# Set working directory
 WORKDIR /app
 
 # Install system dependencies
@@ -8,27 +9,29 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     libglib2.0-0 \
     && rm -rf /var/lib/apt/lists/*
 
-# Create directories with proper permissions and ownership
-RUN mkdir -p /app/data/chroma_crop_rag /app/cache && \
-    chmod -R 777 /app/data /app/cache && \
-    chown -R root:root /app/data /app/cache && \
-    rm -rf /app/data/chroma_crop_rag/* /app/cache/*.lock
+# Create required directories with wide access
+RUN mkdir -p /app/data/chroma_crop_rag /app/cache
 
-# Set HF_HOME for HuggingFace models
-ENV HF_HOME=/app/cache
+# Add a non-root user
+RUN useradd -m appuser
+
+# Set ownership of relevant directories to non-root user
+RUN chown -R appuser:appuser /app/data /app/cache
 
-# Debug: List build context contents
-RUN ls -la .
+# Set environment variable for HuggingFace cache
+ENV HF_HOME=/app/cache
 
-# Copy files (skip chroma_crop_rag to avoid build error)
-# COPY chroma_crop_rag /app/data/chroma_crop_rag
+# Copy application files
 COPY requirements.txt api.py config.py crop_disease_qa.json /app/
 
-# Install dependencies
+# Install Python dependencies
 RUN pip install --no-cache-dir python-multipart -r requirements.txt
 
-# Debug: List files and permissions to verify
-RUN ls -la /app/data /app/cache
+# Change to non-root user
+USER appuser
 
+# Expose the application port
 EXPOSE 7860
-CMD ["python", "api.py"]
+
+# Run the app
+CMD ["python", "api.py"]