Update Dockerfile

Dockerfile

@@ -4,8 +4,12 @@ FROM python:3.10-slim
 RUN apt-get update && apt-get install -y \
     wget \
     gnupg \
+    fontconfig \
     && rm -rf /var/lib/apt/lists/*
 
+# Create non-root user
+RUN useradd -m -u 1000 crawler
+
 # Install latest Chrome and its dependencies
 RUN wget -q -O - https://dl-ssl.google.com/linux/linux_signing_key.pub | apt-key add - \
     && echo "deb [arch=amd64] http://dl.google.com/linux/chrome/deb/ stable main" >> /etc/apt/sources.list.d/google.list \
@@ -20,9 +24,15 @@ RUN wget -q -O - https://dl-ssl.google.com/linux/linux_signing_key.pub | apt-key
     libxss1 \
     && rm -rf /var/lib/apt/lists/*
 
-# Set up working directory
+# Set up working directory and permissions
 WORKDIR /app
 
+# Create and set permissions for cache directories
+RUN mkdir -p /home/crawler/.cache/fontconfig \
+    && mkdir -p /home/crawler/.crawl4ai \
+    && chown -R crawler:crawler /home/crawler \
+    && chown -R crawler:crawler /app
+
 # Copy requirements and install Python dependencies
 COPY requirements.txt .
 RUN pip install --no-cache-dir -r requirements.txt
@@ -33,11 +43,18 @@ RUN playwright install-deps
 
 # Copy application code
 COPY . .
+RUN chown -R crawler:crawler /app
 
 # Set environment variables
 ENV PYTHONUNBUFFERED=1
 ENV GRADIO_SERVER_NAME=0.0.0.0
 ENV GRADIO_SERVER_PORT=7860
+ENV HOME=/home/crawler
+ENV FONTCONFIG_PATH=/etc/fonts
+ENV XDG_CACHE_HOME=/home/crawler/.cache
+
+# Switch to non-root user
+USER crawler
 
 # Expose port
 EXPOSE 7860