Update Dockerfile

Dockerfile

@@ -10,13 +10,14 @@ RUN apt-get update && \
     fonts-liberation \
     && rm -rf /var/lib/apt/lists/*
 
-# Create cache directory with full permissions
-RUN mkdir -p /app/.cache && \
-    chmod -R 777 /app/.cache
+# Create app user and cache directory
+RUN useradd -m appuser && \
+    mkdir -p /app/.cache && \
+    chown -R appuser:appuser /app/.cache
 
 WORKDIR /app
 
-# Set updated Hugging Face environment variables
+# Set environment variables
 ENV HF_HOME=/app/.cache \
     XDG_CACHE_HOME=/app/.cache
 
@@ -24,14 +25,14 @@ ENV HF_HOME=/app/.cache \
 COPY requirements.txt .
 RUN pip install --no-cache-dir -r requirements.txt
 
-# Pre-download model
+# Download model as root then fix permissions
 RUN python -c "from transformers import GPT2LMHeadModel; \
 GPT2LMHeadModel.from_pretrained('gpt2-medium', use_safetensors=True)" && \
-    chmod -R 777 /app/.cache
+    chown -R appuser:appuser /app/.cache
 
-COPY . .
+COPY --chown=appuser:appuser . .
+
+# Run as non-root user
+USER appuser
 
-# Run as non-root user with explicit permissions
-USER 1000
-RUN chmod -R 777 /app/.cache
 CMD ["gunicorn", "--bind", "0.0.0.0:5000", "--timeout", "600", "app:app"]