Update Dockerfile

Dockerfile

@@ -1,12 +1,33 @@
 FROM python:3.9-slim
 
+# 创建专用用户和缓存目录
+RUN useradd -m appuser && \
+    mkdir -p /app/model-cache && \
+    chown -R appuser:appuser /app
+
+# 设置环境变量
+ENV TRANSFORMERS_CACHE=/app/model-cache \
+    HF_HOME=/app/model-cache
+
+# 切换到非root用户
+USER appuser
 WORKDIR /app
-COPY . .
 
-# 先安装依赖确保版本正确
-RUN pip install --no-cache-dir -r requirements.txt \
-    && pip install "sentence-transformers" \
-    && pip install "torch" --extra-index-url https://download.pytorch.org/whl/cpu
+# 先安装系统依赖
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    gcc \
+    python3-dev \
+    && rm -rf /var/lib/apt/lists/*
+
+# 安装Python依赖
+COPY requirements.txt .
+RUN pip install --user --no-cache-dir -r requirements.txt
+
+# 复制应用代码
+COPY app.py .
+
+# 设置PATH
+ENV PATH="/home/appuser/.local/bin:${PATH}"
 
 EXPOSE 5000
 CMD ["python", "app.py"]