Upload Dockerfile

Dockerfile

@@ -1,28 +1,28 @@
-# Dockerfile
 FROM python:3.10-slim
 
+# Set working directory in the container
 WORKDIR /app
-# tells the system to treat /app as the "home" directory, so Streamlit will create /app/.streamlit instead of /.streamlit.
-# /app is already writable as root, so no permission issues.
-ENV HOME=/app
 
+# Copy requirements and install dependencies
+COPY requirements.txt .
+RUN pip install --no-cache-dir -r requirements.txt
 
+# Create group and non-root user for HF Spaces, then make /app writable
+RUN addgroup --gid 1000 user && \
+    adduser --disabled-password --gecos '' --uid 1000 --gid 1000 user && \
+    chown -R user:user /app
 
-# (Optional) system deps if you need them; safe to remove if not needed
-RUN apt-get update && apt-get install -y --no-install-recommends curl && rm -rf /var/lib/apt/lists/*
+# Copy application files
+COPY . .
 
-# Install Python deps
-COPY requirements.txt /app/
-RUN pip install --upgrade pip && pip install --no-cache-dir -r requirements.txt
+# Switch to non-root user
+USER user
 
-# Copy code
-COPY . /app
+# Expose Streamlit port
+EXPOSE 8501
 
-# Do NOT set STREAMLIT_SERVER_PORT here.
-# Spaces will inject $PORT at runtime.
+# Health check for Streamlit
+HEALTHCHECK CMD curl --fail http://localhost:8501/_stcore/health || exit 1
 
-
-# Start Streamlit on the port Spaces provides, and bind to 0.0.0.0
-# CMD ["bash", "-lc", "streamlit run /app/frontend.py --server.port $PORT --server.address 0.0.0.0"]
-# CMD ["sh", "-c", "streamlit run /app/frontend.py --server.port $PORT --server.address 0.0.0.0"]
-CMD ["streamlit", "run", "/app/frontend.py", "--server.port", "8501", "--server.address", "0.0.0.0"]
+# Run Streamlit
+CMD ["streamlit", "run", "frontend.py", "--server.port=8501", "--server.address=0.0.0.0"]