update Docker

.dockerignore

@@ -0,0 +1,12 @@
+__pycache__/
+*.pyc
+*.pyo
+*.pyd
+*.log
+*.sqlite
+*.env
+.env
+venv/
+.git
+.cache/
+.streamlit/

.gitignore

@@ -0,0 +1 @@
+*.pyc

Dockerfile

@@ -2,14 +2,29 @@ FROM python:3.12.11-slim
 
 WORKDIR /app
 
-RUN apt-get update && apt-get install -y ffmpeg && rm -rf /var/lib/apt/lists/*
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends ffmpeg && \
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/*
 
-COPY . ./
+# Create a non-root user
+RUN adduser --disabled-password --gecos '' appuser && \
+    mkdir -p /app/.streamlit /app/.cache /app/logs && \
+    chown -R appuser:appuser /app
 
-RUN mkdir -p /app/.streamlit && chmod -R 777 /app/.streamlit
+# Switch to non-root user
+USER appuser
 
-ENV STREAMLIT_CONFIG_DIR=/app/.streamlit
+# Copy source files
+COPY --chown=appuser:appuser . .
 
-RUN pip3 install --no-cache-dir -r requirements.txt
+# Set environment variable for Streamlit config
+ENV STREAMLIT_CONFIG_DIR=/app/.streamlit \
+    PYTHONUNBUFFERED=1
 
-ENTRYPOINT ["streamlit", "run", "app.py", "--server.port=8501", "--server.address=0.0.0.0"]
+RUN pip install --no-cache-dir --upgrade pip && \
+    pip install --no-cache-dir -r requirements.txt
+
+EXPOSE 8501
+
+CMD ["streamlit", "run", "app.py", "--server.port=8501", "--server.address=0.0.0.0"]