Update Dockerfile

Dockerfile

@@ -1,28 +1,35 @@
 FROM python:3.11.9-slim
 
-WORKDIR /app
-
+# 1) System deps
 RUN apt-get update && apt-get install -y \
-    build-essential \
-    curl \
-    software-properties-common \
-    git \
+      build-essential \
+      curl \
+      software-properties-common \
+      git \
     && rm -rf /var/lib/apt/lists/*
 
-COPY requirements.txt ./
-COPY src/ ./src/
+# 2) Create app user with home dir
+RUN useradd -m -u 10001 -s /usr/sbin/nologin appuser
+
+WORKDIR /app
+# Make sure /app is owned by our user
+RUN chown appuser:appuser /app
 
+# 3) Copy & install Python deps as root
+COPY requirements.txt .
 RUN pip3 install -r requirements.txt
 
-# ─── STREAMLIT PERMISSION FIX ─────────────────────────────
-ENV HOME=/tmp \
-    STREAMLIT_DATA_DIR=/tmp/.streamlit \
-    XDG_CONFIG_HOME=/tmp/.streamlit
-RUN mkdir -p /tmp/.streamlit
-# ───────────────────────────────────────────────────────────
+# 4) Copy your source & switch to non‑root
+COPY src/ ./src/
+USER appuser
+
+# 5) Ensure Streamlit config dir exists in the new home
+ENV HOME=/home/appuser \
+    STREAMLIT_DATA_DIR=/home/appuser/.streamlit \
+    XDG_CONFIG_HOME=/home/appuser/.streamlit
+RUN mkdir -p /home/appuser/.streamlit
 
 EXPOSE 8501
-
 HEALTHCHECK CMD curl --fail http://localhost:8501/_stcore/health
 
 ENTRYPOINT ["streamlit", "run", "src/app.py", "--server.port=8501", "--server.address=0.0.0.0"]