Fix permissions for file uploads

Dockerfile

@@ -18,6 +18,7 @@ RUN mkdir -p /code/static/uploads \
     && mkdir -p /code/logs \
     && mkdir -p /code/external/BodybuildingPoseClassifier \
     && mkdir -p /code/templates \
+    && chown -R nobody:nogroup /code \
     && chmod -R 777 /code/static/uploads \
     && chmod -R 777 /code/logs \
     && chmod -R 777 /code/external \
@@ -26,6 +27,13 @@ RUN mkdir -p /code/static/uploads \
 # Copy the entire application first
 COPY . .
 
+# Set correct ownership and permissions after copying
+RUN chown -R nobody:nogroup /code \
+    && chmod -R 777 /code/static/uploads \
+    && chmod -R 777 /code/logs \
+    && chmod -R 777 /code/external \
+    && chmod -R 777 /code/templates
+
 # Verify model file exists and has correct permissions
 RUN ls -la /code/external/BodybuildingPoseClassifier/ && \
     chmod 644 /code/external/BodybuildingPoseClassifier/bodybuilding_pose_classifier.h5
@@ -38,5 +46,8 @@ ENV TF_CPP_MIN_LOG_LEVEL=2
 # Expose the port
 EXPOSE 7860
 
+# Run the application as non-root user
+USER nobody
+
 # Run the application
 CMD ["python", "app.py"]