Update Dockerfile

Dockerfile

@@ -9,15 +9,17 @@ ENV POETRY_VERSION=1.8.4 \
     POETRY_CACHE_DIR=/tmp/poetry_cache \
     PYTHONDONTWRITEBYTECODE=1
 
-# Create directories and set permissions first
-RUN mkdir -p /app/api /app/web /data/storage /var/lib/postgresql/data && \
-    chmod 777 /data /app && \
-    useradd -m -u 1000 user && \
+# Create non-root user first
+RUN useradd -m -u 1000 user && \
     apt-get update && \
     apt-get install -y sudo && \
     usermod -aG sudo user && \
     echo "user ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers
 
+# Create directories with correct permissions
+RUN mkdir -p /app/api /app/web /data/storage /var/lib/postgresql/data && \
+    chmod 777 /data /app /var/lib/postgresql/data
+
 # Install system dependencies
 RUN apt-get update && apt-get install -y \
     curl \
@@ -32,8 +34,7 @@ RUN apt-get update && apt-get install -y \
     postgresql \
     postgresql-contrib \
     && rm -rf /var/lib/apt/lists/* \
-    && pip install --no-cache-dir "poetry==${POETRY_VERSION}" \
-    && chown -R postgres:postgres /var/lib/postgresql
+    && pip install --no-cache-dir "poetry==${POETRY_VERSION}"
 
 # Initialize PostgreSQL database as postgres user
 USER postgres
@@ -41,9 +42,13 @@ RUN /usr/lib/postgresql/15/bin/initdb -D /var/lib/postgresql/data && \
     echo "host all  all    0.0.0.0/0  md5" >> /var/lib/postgresql/data/pg_hba.conf && \
     echo "listen_addresses='*'" >> /var/lib/postgresql/data/postgresql.conf
 
-# Switch back to user for remaining operations
+# Switch to user for remaining operations
 USER user
 
+# Set environment for user
+ENV HOME=/home/user \
+    PATH=/home/user/.local/bin:$PATH
+
 # Pull official images
 FROM langgenius/dify-web:latest AS web
 FROM langgenius/dify-api:latest AS api
@@ -93,8 +98,6 @@ ENV FLASK_APP=app.py \
     REDIS_PASSWORD=difyai123456 \
     CELERY_BROKER_URL=amqp://guest:guest@localhost:5672// \
     CELERY_RESULT_BACKEND=redis://localhost:6379/0 \
-    HOME=/home/user \
-    PATH=/home/user/.local/bin:$PATH \
     PYTHONPATH=/app/api \
     STORAGE_PATH=/data/storage