Update Dockerfile

Dockerfile

@@ -52,49 +52,42 @@ RUN groupadd -r appgroup --gid 1000 && \
 
 # Set Streamlit home directory (already created and chowned)
 ENV STREAMLIT_HOME=/home/appuser/.streamlit
+# Set environment variable to disable telemetry (alternative to CLI flag)
+ENV STREAMLIT_CLIENT_GATHER_USAGE_STATS=false
 
-# Set the working directory in the container (owned by root initially, will be chowned)
+# Set the working directory in the container
 WORKDIR /app
 
-# Copy requirements.txt and install dependencies AS APPUSER
-# First, copy just requirements.txt and chown its destination so appuser can write to /app (temporarily for this step)
+# Copy requirements.txt
 COPY --chown=appuser:appgroup requirements.txt .
+
+# Install Python dependencies as the non-root user
 USER appuser
 RUN pip install --no-cache-dir --upgrade pip && \
-    pip install --user --no-cache-dir -r requirements.txt # --user installs to ~/.local
+    pip install --user --no-cache-dir -r requirements.txt
 
 # Add user's local bin to PATH
 ENV PATH="/home/appuser/.local/bin:${PATH}"
 
-# Copy the rest of the application code AS APPUSER
-# WORKDIR /app is still in effect, appuser should have rights to write here if /app was chowned.
-# However, to be absolutely safe, we copy to a location appuser definitely owns, or chown /app after copy by root.
-# Let's stick to copying as root then chowning all of /app.
-
+# Switch back to root temporarily for copying application files and setting permissions
 USER root
-COPY . .
+COPY . . 
 RUN chown -R appuser:appgroup /app
 
-# Create runtime directories AS APPUSER (now that /app is owned by appuser)
+# Create runtime directories as appuser (now that /app is owned by appuser)
 USER appuser
 RUN mkdir -p /app/temp_cinegen_media
-RUN mkdir -p /app/assets/fonts # This directory should exist from COPY, but ensure it.
+RUN mkdir -p /app/assets/fonts
 
-# Copy custom fonts to system location (as root, if needed by MoviePy's ImageMagick backend directly)
-# This step is optional if Pillow direct font path loading is sufficient.
+# (Optional: System-wide font copy block, commented out as before, only if needed)
 # USER root
 # RUN if [ -d "/app/assets/fonts" ] && [ "$(ls -A /app/assets/fonts)" ]; then \
-#         mkdir -p /usr/local/share/fonts/truetype/cinegen_custom && \
-#         cp /app/assets/fonts/*.*tf /usr/local/share/fonts/truetype/cinegen_custom/ 2>/dev/null || true && \
-#         fc-cache -fv && \
-#         echo "INFO: Copied custom fonts and refreshed font cache (as root)."; \
-#     else \
-#         echo "INFO: No custom fonts found in /app/assets/fonts to copy system-wide." ; \
-#     fi
-# USER appuser # Switch back to appuser for runtime
+# ...
+# USER appuser
 
 # Expose the port Streamlit runs on
 EXPOSE 8501
 
 # Define the command to run the application
-CMD ["streamlit", "run", "app.py", "--server.port=8501", "--server.address=0.0.0.0", "--global.sharingMode=off", "--client.gatherUsageStats=false"]
+# REMOVED --global.sharingMode=off
+CMD ["streamlit", "run", "app.py", "--server.port=8501", "--server.address=0.0.0.0", "--client.gatherUsageStats=false"]