Updated FastAPI code

Dockerfile

@@ -10,17 +10,20 @@ RUN apt-get update && apt-get install -y \
 # Set working directory
 WORKDIR /app
 
-# Copy source code
-COPY . .
-
-# Upgrade pip and install dependencies
-RUN pip install --upgrade pip
-RUN pip install --no-cache-dir torch torchvision torchaudio
-RUN pip install --no-cache-dir git+https://github.com/pyannote/pyannote-audio.git
-RUN pip install --no-cache-dir -r requirements.txt
+# Create a non-root user and group
+RUN addgroup --system app && adduser --system --group app
 
 # Create writable directories for model and matplotlib cache
+# And change their ownership to the new user
 RUN mkdir -p /tmp/huggingface /tmp/matplotlib
+RUN chown -R app:app /tmp/huggingface /tmp/matplotlib
+
+# Copy source code and change its ownership
+COPY . .
+RUN chown -R app:app /app
+
+# Switch to the non-root user
+USER app
 
 # Set environment variables to use writable paths
 ENV HF_HOME=/tmp/huggingface
@@ -28,8 +31,14 @@ ENV HF_HUB_CACHE=/tmp/huggingface
 ENV TRANSFORMERS_CACHE=/tmp/huggingface
 ENV MPLCONFIGDIR=/tmp/matplotlib
 
+# Upgrade pip and install dependencies
+RUN pip install --upgrade pip
+RUN pip install --no-cache-dir torch torchvision torchaudio
+RUN pip install --no-cache-dir git+https://github.com/pyannote/pyannote-audio.git
+RUN pip install --no-cache-dir -r requirements.txt
+
 # Expose FastAPI port
 EXPOSE 7860
 
 # Run the FastAPI app
-CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]
+CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]