Update Dockerfile

Dockerfile

@@ -1,30 +1,58 @@
-# Use the official Python 3.10 slim image as the base
+# Use a stable slim Python base image
 FROM python:3.10-slim
 
-# Set environment variables to ensure consistent behavior
+# Set environment variables
 ENV PYTHONUNBUFFERED=1 \
-    STREAMLIT_BROWSER_GATHER_USAGE_STATS=false \
-    STREAMLIT_SERVER_HEADLESS=true \
-    STREAMLIT_HOME=/tmp/.streamlit
+    LANG=C.UTF-8 \
+    LC_ALL=C.UTF-8 \
+    PIP_NO_CACHE_DIR=1 \
+    STREAMLIT_BROWSER_GATHER_USAGE_STATS=false
 
-# Create the .streamlit directory with appropriate permissions
-RUN mkdir -p $STREAMLIT_HOME && chmod -R 755 $STREAMLIT_HOME
-
-# Set the working directory in the container
+# Create working directory and Streamlit config path with correct permissions
 WORKDIR /app
-
-# Copy only the requirements file first to leverage Docker cache
-COPY requirements.txt .
-
-# Install Python dependencies
-RUN pip install --no-cache-dir --upgrade pip \
-    && pip install --no-cache-dir -r requirements.txt
-
-# Copy the rest of the application code
-COPY . .
-
-# Expose the port Streamlit will run on
+RUN useradd -m -u 1000 appuser && \
+    mkdir -p /home/appuser/.streamlit && \
+    chown -R appuser /home/appuser && \
+    apt-get update && apt-get install -y \
+    build-essential \
+    curl \
+    git \
+    libglib2.0-0 \
+    libsm6 \
+    libxrender1 \
+    libxext6 \
+    libxml2 \
+    libxslt1-dev \
+    libffi-dev \
+    libbz2-dev \
+    liblzma-dev \
+    zlib1g-dev \
+    libjpeg-dev \
+    libpq-dev \
+    gcc \
+    && apt-get clean && rm -rf /var/lib/apt/lists/*
+
+# Switch to non-root user for safety
+USER appuser
+
+# Copy requirement files and install dependencies
+COPY --chown=appuser:appuser requirements.txt /app/
+RUN pip install --upgrade pip && pip install -r requirements.txt
+
+# Copy rest of the application code
+COPY --chown=appuser:appuser . /app
+
+# Streamlit config
+RUN echo "\
+[server]\n\
+headless = true\n\
+port = 8501\n\
+enableCORS = false\n\
+\n\
+[theme]\n\
+base = 'light'\n\
+" > /home/appuser/.streamlit/config.toml
+
+# Default command
 EXPOSE 8501
-
-# Define the command to run the Streamlit app
-CMD ["streamlit", "run", "app.py", "--server.port=8501", "--server.address=0.0.0.0"]
+CMD ["streamlit", "run", "app.py", "--server.address=0.0.0.0"]