Update Dockerfile

Dockerfile

@@ -6,46 +6,52 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     build-essential \
     && rm -rf /var/lib/apt/lists/*
 
-# Set environment variables for user installation
-ENV PATH=/root/.local/bin:$PATH
+# Set environment variables
+ENV PYTHONUNBUFFERED=1
+ENV PYTHONDONTWRITEBYTECODE=1
 
-# Set the working directory in the builder
+# Set the working directory
 WORKDIR /app
 
 # Copy the requirements file first for better caching
 COPY requirements.txt /app/
 
-# Install dependencies to /root/.local using --user
+# Install dependencies system-wide
 RUN pip install --no-cache-dir --upgrade pip
-RUN pip install --no-cache-dir --user -r requirements.txt
+RUN pip install --no-cache-dir -r requirements.txt
 
 # Stage 2: Production
 FROM python:3.10-slim
 
-# Install system dependencies
+# Install system dependencies required for production
 RUN apt-get update && apt-get install -y --no-install-recommends \
     libpq-dev \
     && rm -rf /var/lib/apt/lists/*
 
-# Set environment variables for user installation
-ENV PATH=/root/.local/bin:$PATH
+# Create a non-root user and group
+RUN groupadd -r appuser && useradd -r -g appuser appuser
+
+# Set environment variables
 ENV PYTHONUNBUFFERED=1
 ENV PYTHONDONTWRITEBYTECODE=1
 
-# Set the working directory in the container
+# Set the working directory
 WORKDIR /app
 
 # Copy installed Python packages from the builder stage
-COPY --from=builder /root/.local /root/.local
+COPY --from=builder /usr/local /usr/local
 
 # Copy the current directory contents into the container
 COPY . /app
 
-# Ensure that the Python path includes the local packages
-ENV PYTHONPATH=/root/.local/lib/python3.10/site-packages:$PYTHONPATH
+# Change ownership to the non-root user
+RUN chown -R appuser:appuser /app
+
+# Switch to the non-root user
+USER appuser
 
-# Expose the port that the FastAPI app runs on
+# Expose the port
 EXPOSE 8001
 
-# Command to run the app with Gunicorn and Uvicorn workers
+# Run gunicorn
 CMD ["gunicorn", "-k", "uvicorn.workers.UvicornWorker", "--workers", "4", "--bind", "0.0.0.0:8001", "main:app"]