Update Dockerfile.min

Dockerfile.min

@@ -12,9 +12,20 @@ RUN mkdir -p voices config
 
 COPY requirements*.txt /app/
 RUN --mount=type=cache,target=/root/.cache/pip pip install -r requirements-min.txt
+
 COPY *.py *.sh *.default.yaml README.md LICENSE /app/
 
+# Ensure scripts are executable
+RUN chmod +x /app/*.sh
+
+# Add a non-root user and change ownership
+RUN useradd -ms /bin/bash appuser
+RUN chown -R appuser:appuser /app
+
+USER appuser
+WORKDIR /app
+
 ENV TTS_HOME=voices
 ENV HF_HOME=voices
 
-CMD bash startup.min.sh
+CMD bash startup.min.sh