Update Dockerfile

Dockerfile

@@ -4,10 +4,13 @@ FROM python:3.11-slim
 # Set the working directory inside the container
 WORKDIR /code
 
-# --- *** ADD THIS LINE *** ---
 # Set an environment variable to tell Hugging Face where to cache models.
-# This avoids permission errors by using a local, writable directory.
 ENV HF_HOME /code/.cache
+
+# --- *** ADD THIS LINE *** ---
+# Create the cache directory and change its ownership to the default 'python' user.
+# This gives our application the necessary permissions to write model files.
+RUN mkdir -p /code/.cache && chown -R python:python /code/.cache
 # --- ********************* ---
 
 # Copy the requirements file and install dependencies
@@ -17,6 +20,11 @@ RUN pip install --no-cache-dir --upgrade -r /code/requirements.txt
 # Copy the rest of the application code
 COPY ./app.py /code/app.py
 
+# --- *** ADD THIS LINE TO SWITCH USER *** ---
+# Switch to the non-root 'python' user to run the application securely
+USER python
+# --- ************************************** ---
+
 # Expose the port the app runs on
 EXPOSE 8000