Update Dockerfile

Dockerfile

@@ -1,38 +1,44 @@
-# Use Python 3.13 slim image as base
+# Use Python 3.13.2 as the base image
 FROM python:3.13.2-slim
 
-# Set working directory
-WORKDIR /app
-
-# Set environment variables
-ENV PYTHONDONTWRITEBYTECODE=1 \
-    PYTHONUNBUFFERED=1 \
-    STREAMLIT_SERVER_PORT=8501 \
-    STREAMLIT_SERVER_ADDRESS=0.0.0.0 \
-    UV_CACHE_DIR=/tmp/uv-cache
-
-# Install system dependencies and uv
+# Install system dependencies as root first
 RUN apt-get update && apt-get install -y \
-    build-essential \
+    gcc \
+    g++ \
     curl \
-    && rm -rf /var/lib/apt/lists/* \
-    && curl -LsSf https://astral.sh/uv/install.sh | sh \
-    && /root/.cargo/bin/uv --version
+    build-essential \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install uv
+COPY --from=ghcr.io/astral-sh/uv:latest /uv /bin/uv
+
+# Create user after system packages are installed
+RUN useradd -m -u 1000 user
+USER user
+
+# Set home to the user's home directory
+ENV HOME=/home/user \
+    PATH=/home/user/.local/bin:$PATH
+
+# Set the working directory
+WORKDIR $HOME/app
 
-# Add uv to PATH
-ENV PATH="/root/.cargo/bin:$PATH"
+# Create directories with proper permissions for app data
+RUN mkdir -p $HOME/app/logs $HOME/app/data $HOME/app/tmp && \
+    chmod -R 755 $HOME/app
 
-# Copy project files
-COPY pyproject.toml uv.lock* ./
+# Copy pyproject.toml and uv.lock first to leverage Docker cache
+COPY --chown=user:user pyproject.toml uv.lock ./
 
-# Install dependencies using uv with full path to ensure it's found
-RUN /root/.cargo/bin/uv sync --frozen --no-dev
+# Install Python dependencies using uv
+RUN uv sync --frozen --no-dev
 
-# Copy the rest of the application
-COPY . .
+# Copy the application code
+COPY --chown=user:user . $HOME/app
 
-# Expose the port Streamlit runs on
-EXPOSE 8501
+# Ensure all app files have proper permissions
+RUN chmod -R 755 $HOME/app && \
+    find $HOME/app -type f -name "*.py" -exec chmod 644 {} \;
 
-# Command to run the application using uv
-CMD ["uv", "run", "streamlit", "run", "app.py"] 
+# Expose the port the app runs on
+EXPOSE 8000