Enhance Dockerfile and Streamlit app configuration by adding user management and environment variable handling for MongoDB connection. Introduce secrets management for sensitive data and update requirements installation process. New secrets.toml file created for storing MongoDB URI.

.streamlit/secrets.toml

@@ -0,0 +1 @@
+mongo_uri = "mongodb+srv://multichem:[email protected]/?retryWrites=true&w=majority&appName=TestCluster"

Dockerfile

@@ -11,13 +11,20 @@ RUN apt-get update && apt-get install -y \
 
 COPY requirements.txt ./
 COPY src/ ./src/
+COPY .streamlit/ ./.streamlit/
+
 
-RUN pip3 install -r requirements.txt
 
-# Expose the secret SECRET_EXAMPLE at buildtime and use its value as git remote URL
-RUN --mount=type=secret,id=mongo_uri,mode=0444,required=true \
-    git init && \
-    git remote add origin $(cat /run/secrets/mongo_uri)
+ENV MONGO_URI="mongodb+srv://multichem:[email protected]/?retryWrites=true&w=majority&appName=TestCluster"
+RUN useradd -m -u 1000 user
+USER user
+ENV HOME=/home/user\
+	PATH=/home/user/.local/bin:$PATH
+WORKDIR $HOME/app
+RUN pip install --no-cache-dir --upgrade pip
+COPY --chown=user . $HOME/app
+
+RUN pip3 install -r requirements.txt
 
 EXPOSE 8501
 

src/streamlit_app.py

@@ -9,7 +9,10 @@ st.set_page_config(layout="wide")
 
 @st.cache_resource
 def init_conn():
-        uri = os.getenv('mongo_uri')
+         # Try to get from environment variable first, fall back to secrets
+        uri = os.getenv('MONGO_URI')
+        if not uri:
+            uri = st.secrets['mongo_uri']
         client = pymongo.MongoClient(uri, retryWrites=True, serverSelectionTimeoutMS=500000)
         db = client["PGA_Database"]