run docker container as non-root user

Dockerfile

@@ -1,18 +1,24 @@
 FROM python:3.13-slim
 
-WORKDIR /app
+# Create user with UID 1000 
+RUN useradd -m -u 1000 user
+USER user
 
-COPY requirements.txt ./
+ENV HOME=/home/user \
+    PATH=/home/user/.local/bin:$PATH \
+    PYTHONUNBUFFERED=1
 
-RUN pip install --no-cache-dir torch --index-url https://download.pytorch.org/whl/cpu
+WORKDIR $HOME/app
+
+COPY --chown=user requirements.txt ./
 
+RUN pip install --no-cache-dir torch --index-url https://download.pytorch.org/whl/cpu
 RUN pip install --no-cache-dir -r requirements.txt
 
-COPY . .
+COPY --chown=user . .
 
 RUN python build_index.py
 
-ENV PYTHONUNBUFFERED=1
 EXPOSE 7860
 
 CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]