Update Dockerfile

Dockerfile

@@ -3,19 +3,11 @@ FROM python:3.11-slim
 
 # Set environment variables to avoid writing to root
 # Optional: Disable Usage Stats (telemetry) for Privacy / Stability
-ENV HOME=/root
-ENV MPLCONFIGDIR=/root/.config/matplotlib
-ENV STREAMLIT_CONFIG_DIR=/root/.streamlit
 ENV STREAMLIT_DISABLE_USAGE_STATS=true
 
 # Set working directory inside container
 WORKDIR /app
 
-# Ensure /app and cache/config directories exist with proper permissions
-RUN chown -R root:root /app && \
-    mkdir -p /root/.cache /root/.config/matplotlib /root/.streamlit && \
-    chmod -R 777 /root/.cache /root/.config /root/.streamlit /app
-
 # Install dependencies
 RUN apt-get update && apt-get install -y \
     build-essential \
@@ -31,12 +23,21 @@ RUN apt-get update && apt-get install -y \
     graphviz \
     && rm -rf /var/lib/apt/lists/*
 
+# Create a non-root user
+RUN useradd --create-home --shell /bin/bash appuser
+
+# Set permissions for the working directory
+RUN chown -R appuser:appuser /app
+
+# Switch to non-root user
+USER appuser
+
 # Copy source and requirements
 COPY requirements.txt ./
 COPY src/ ./src/
 
 # Install Python dependencies including streamlit
-RUN pip3 install -r requirements.txt
+RUN pip3 install --no-cache-dir --user -r requirements.txt
 
 # Expose port
 EXPOSE 8501