升级优化

Dockerfile

@@ -2,10 +2,23 @@ FROM python:3.9-slim
 
 WORKDIR /app
 
+# Create a non-root user to run the application
+RUN useradd -m -u 1000 user
+
 COPY requirements.txt .
 RUN pip install --no-cache-dir -r requirements.txt
 
-COPY . .
+# Copy application code with ownership set to the non-root user
+COPY --chown=user:user . .
+
+# Ensure static directories exist and have correct permissions
+# This prevents permission errors if the app tries to write to these directories
+# although we removed the write operations from app.py, it's good practice.
+RUN mkdir -p static/js static/css && \
+    chown -R user:user static
+
+# Switch to the non-root user
+USER user
 
 EXPOSE 7860
 

app.py

@@ -3,10 +3,6 @@ import os
 
 app = Flask(__name__)
 
-# Ensure static folders exist
-os.makedirs('static/js', exist_ok=True)
-os.makedirs('static/css', exist_ok=True)
-
 @app.route('/')
 def index():
     return render_template('index.html')

requirements.txt

@@ -1,2 +1,2 @@
-Flask==3.0.0
-gunicorn
+Flask>=3.0.0
+gunicorn>=20.1.0

templates/index.html

@@ -4,9 +4,9 @@
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <title>创业跑道模拟器 (Startup Runway Simulator)</title>
-    <script src="https://cdn.tailwindcss.com"></script>
-    <script src="https://unpkg.com/vue@3/dist/vue.global.js"></script>
-    <script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
+    <script src="/static/js/tailwind.js"></script>
+    <script src="/static/js/vue.global.js"></script>
+    <script src="/static/js/chart.js"></script>
     <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css" rel="stylesheet">
     <style type="text/tailwindcss">
         [v-cloak] { display: none; }