Update Dockerfile

Dockerfile

@@ -1,47 +1,39 @@
 FROM python:3.11-slim
 
-# ========= 系统环境变量（必须在 import streamlit 之前生效） =========
-# 把 HOME 等全部指向 /tmp（可写目录）
+# ---------- 让 Streamlit 在导入前就用 /tmp，可写 ----------
 ENV HOME=/tmp
 ENV XDG_CACHE_HOME=/tmp
 ENV STREAMLIT_CACHE_DIR=/tmp
 ENV STREAMLIT_GLOBAL_DATA_DIR=/tmp
 ENV STREAMLIT_RUNTIME_DIR=/tmp
 ENV STREAMLIT_CONFIG_DIR=/tmp/.streamlit
-ENV STREAMLIT_BROWSER_GATHER_USAGE_STATS=false
-
-# 创建必要目录
 RUN mkdir -p /tmp/.streamlit
 
-# ========= 安装系统依赖 =========
-# Tesseract OCR + 中文包 + PDF 处理工具
+# ---------- 关闭 CORS / XSRF，放宽上传限制（避免 403） ----------
+ENV STREAMLIT_SERVER_ENABLE_CORS=false
+ENV STREAMLIT_SERVER_ENABLE_XSRF_PROTECTION=false
+ENV STREAMLIT_SERVER_MAX_UPLOAD_SIZE=200
+ENV STREAMLIT_BROWSER_GATHER_USAGE_STATS=false
+ENV STREAMLIT_SERVER_HEADLESS=true
+# 端口/地址
+ENV STREAMLIT_SERVER_PORT=7860
+ENV STREAMLIT_SERVER_ADDRESS=0.0.0.0
+
+# ---------- 安装系统依赖（OCRmyPDF 运行所需） ----------
 RUN apt-get update && apt-get install -y --no-install-recommends \
-    tesseract-ocr \
-    tesseract-ocr-eng \
-    tesseract-ocr-chi-sim \
-    ghostscript \
-    qpdf \
-    pngquant \
-    unpaper \
-    icc-profiles-free \
-    libmagic1 \
-    ca-certificates && \
+    tesseract-ocr tesseract-ocr-eng tesseract-ocr-chi-sim \
+    ghostscript qpdf pngquant unpaper icc-profiles-free \
+    libmagic1 ca-certificates && \
     rm -rf /var/lib/apt/lists/*
 
-# ========= 安装 Python 依赖 =========
+# ---------- Python 依赖 ----------
 WORKDIR /app
 COPY requirements.txt /app/requirements.txt
 RUN pip install --no-cache-dir -r requirements.txt
 
-# ========= 复制应用代码 =========
+# ---------- 应用代码 ----------
 COPY app.py /app/app.py
 COPY README.md /app/README.md
 
-# ========= 容器启动配置 =========
 EXPOSE 7860
-ENV STREAMLIT_SERVER_PORT=7860
-ENV STREAMLIT_SERVER_ADDRESS=0.0.0.0
-# 禁止 Streamlit 自动打开浏览器（Spaces 环境也不会）
-ENV STREAMLIT_BROWSER_SERVER_ADDRESS=0.0.0.0
-
 CMD ["streamlit", "run", "app.py", "--server.port=7860", "--server.address=0.0.0.0"]