Update Dockerfile

Dockerfile

@@ -1,34 +1,81 @@
-# Use Node.js 18 base image
 FROM node:20
 
-# Create a non-root user
+# Switch to root to manage system dependencies and user creation
+USER root
+
+# Install system dependencies required by Playwright and Chromium
+RUN apt-get update && \
+    apt-get install -y \
+    ca-certificates \
+    fonts-liberation \
+    libasound2 \
+    libatk-bridge2.0-0 \
+    libatk1.0-0 \
+    libc6 \
+    libcairo2 \
+    libcups2 \
+    libdbus-1-3 \
+    libexpat1 \
+    libfontconfig1 \
+    libgbm1 \
+    libgcc1 \
+    libglib2.0-0 \
+    libgtk-3-0 \
+    libnspr4 \
+    libnss3 \
+    libpango-1.0-0 \
+    libpangocairo-1.0-0 \
+    libstdc++6 \
+    libx11-6 \
+    libx11-xcb1 \
+    libxcb1 \
+    libxcomposite1 \
+    libxcursor1 \
+    libxdamage1 \
+    libxext6 \
+    libxfixes3 \
+    libxi6 \
+    libxrandr2 \
+    libxrender1 \
+    libxss1 \
+    libxtst6 \
+    lsb-release \
+    wget \
+    xdg-utils
+
+# Create non-root user
 RUN groupadd -r appuser && useradd -r -g appuser appuser
 
 # Set working directory
 WORKDIR /usr/src/app
 
-# Copy package files and install dependencies
+# Copy package files first for efficient layer caching
 COPY package*.json ./
+
+# Transfer ownership to appuser before installing dependencies
+RUN chown -R appuser:appuser /usr/src/app
+
+# Switch to non-root user for dependency installation
+USER appuser
+
+# Install Node.js dependencies
 RUN npm install
 RUN npm i playwright-extra puppeteer-extra-plugin-stealth
+
+# Install Playwright browsers under appuser's home directory
 RUN npx playwright install chromium
 RUN npx playwright install --with-deps
 
-
-# If building for production, use:
-# RUN npm ci --only=production
-
-# Copy application source code
+# Switch back to root to copy application code
+USER root
 COPY . .
 
-# Change ownership of the app directory to the non-root user
+# Ensure appuser owns all application files
 RUN chown -R appuser:appuser /usr/src/app
 
-# Switch to the non-root user
+# Switch to non-root user for runtime
 USER appuser
 
-# Expose the desired port (optional, based on your server.js configuration)
+# Expose port and run application
 EXPOSE 7860
-
-# Set the default command to start the server
-CMD ["node", "server.js"]
+CMD ["node", "server.js"]