updated docker

Dockerfile

@@ -26,10 +26,22 @@ RUN poetry install --no-interaction --no-ansi \
     && pip install --no-build-isolation flash-attn \
     && pip install "rerankers[all]"
 
+RUN useradd -m -u 1000 user
+USER user
+ENV HOME /home/user
+ENV PATH $HOME/.local/bin:$PATH
+
 # Copy the rest of the application
-COPY . .
+WORKDIR $HOME
+RUN mkdir app
+WORKDIR $HOME/app
+COPY . $HOME/app
 
 # Expose a port if needed (update according to your application)
 EXPOSE 8501
 # Run the Streamlit app
-CMD ["streamlit", "run", "app.py"]
+CMD streamlit run app.py \
+    --server.headless true \
+    --server.enableCORS false \
+    --server.enableXsrfProtection false \
+    --server.fileWatcherType none