Update Dockerfile

Dockerfile

@@ -3,23 +3,6 @@ FROM node:20-slim
 # Set user to root for installation
 USER root
 
-# Arguments that can be passed at build time
-ARG N8N_PATH=/usr/local/lib/node_modules/n8n
-ARG BASE_PATH=/root/.n8n
-ARG DATABASE_PATH=$BASE_PATH/database
-ARG CONFIG_PATH=$BASE_PATH/config
-ARG WORKFLOWS_PATH=$BASE_PATH/workflows
-ARG LOGS_PATH=$BASE_PATH/logs
-ARG N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=$N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS
-ARG N8N_HOST=$N8N_HOST
-ARG N8N_PORT=$N8N_PORT
-ARG N8N_PROTOCOL=https
-ARG N8N_EDITOR_BASE_URL=$N8N_EDITOR_BASE_URL
-ARG WEBHOOK_URL=$WEBHOOK_URL
-ARG GENERIC_TIMEZONE=$GENERIC_TIMEZONE
-ARG TZ=$TZ
-ARG N8N_ENCRYPTION_KEY=$N8N_ENCRYPTION_KEY
-
 # Install system dependencies required by sharp, imagemagick, graphicsmagick, and other image processing tools
 RUN apt update && apt install -y \
     ffmpeg \
@@ -57,6 +40,12 @@ RUN npm install -g sharp@0.33.5 jimp imagemagick
 # Install n8n globally (pinned to a stable version)
 RUN npm install -g n8n
 
+# Create a writable directory for SQLite database
+RUN mkdir -p /workspace/data && chown -R node:node /workspace/data
+
+# Switch to node user (Hugging Face default)
+USER node
+
 # Set working directory Hugging Face will use
 WORKDIR /workspace
 
@@ -70,10 +59,13 @@ ENV GENERIC_TIMEZONE=UTC
 # Enable verbose logging for sharp
 ENV SHARP_VERBOSE=true
 
-# Configure n8n to use SQLite (database stored in /workspace, persistent in HF Spaces)
+# Configure n8n to use SQLite (database stored in /workspace/data, node user has permission)
 ENV DB_TYPE=sqlite
 ENV DB_SQLITE_VACUUM_ON_STARTUP=true
-ENV DB_SQLITE_DATABASE=/workspace/database.sqlite
+ENV DB_SQLITE_DATABASE=/workspace/data/database.sqlite
+
+# Auto-fix config permissions
+ENV N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=true
 
 # Start n8n with tunnel enabled (to bypass Hugging Face networking)
 CMD ["n8n", "start", "--tunnel"]