Update Dockerfile

Dockerfile

@@ -1,30 +1,41 @@
-FROM python:3.10-slim
-
-# Install system dependencies
-RUN apt-get update && apt-get install -y \
-    tesseract-ocr \
-    tesseract-ocr-eng \
-    tesseract-ocr-ara \
-    poppler-utils \
-    libopencv-dev \
-    && apt-get clean \
-    && rm -rf /var/lib/apt/lists/*
-
-# Set Tesseract path
-ENV TESSDATA_PREFIX=/usr/share/tesseract-ocr/5/tessdata/
-
-# Set working directory
-WORKDIR /app
-
-# Copy requirements and install
-COPY requirements.txt .
-RUN pip install --no-cache-dir -r requirements.txt
-
-# Copy application code
-COPY app.py .
-
-# Expose port for FastAPI
-EXPOSE 7860
-
-# Command to run the app
+FROM python:3.10-slim
+
+# Install system dependencies
+RUN apt-get update && apt-get install -y \
+    tesseract-ocr \
+    tesseract-ocr-eng \
+    tesseract-ocr-ara \
+    poppler-utils \
+    libopencv-dev \
+    && apt-get clean \
+    && rm -rf /var/lib/apt/lists/*
+
+# Set Tesseract path
+ENV TESSDATA_PREFIX=/usr/share/tesseract-ocr/5/tessdata/
+
+# Create a non-root user and set up cache directory
+RUN useradd -m appuser && \
+    mkdir -p /app/cache && \
+    chown -R appuser:appuser /app
+
+# Set working directory
+WORKDIR /app
+
+# Copy requirements and install
+COPY requirements.txt .
+RUN pip install --no-cache-dir -r requirements.txt
+
+# Copy application code
+COPY app.py .
+
+# Switch to non-root user
+USER appuser
+
+# Set Hugging Face cache directory
+ENV HF_HOME=/app/cache
+
+# Expose port for FastAPI
+EXPOSE 7860
+
+# Command to run the app
 CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]