update: dockerfile ffmpeg permission

Dockerfile

@@ -3,6 +3,10 @@ FROM ubuntu:22.04
 # Prevent interactive prompts during installation
 ENV DEBIAN_FRONTEND=noninteractive
 
+# Set environment variables for MoviePy
+ENV IMAGEMAGICK_BINARY=/usr/bin/convert
+ENV IMAGEIO_FFMPEG_EXE=/usr/bin/ffmpeg
+
 # Install system dependencies
 RUN apt-get update && apt-get install -y \
     software-properties-common && \
@@ -16,12 +20,13 @@ RUN apt-get update && apt-get install -y \
 
 # Create directories with proper permissions
 WORKDIR /app
-RUN mkdir -p /app/resources/{temp_video,audio,fonts,intro} \
-    && chmod -R 777 /app/resources
-
-# Set up temp directory with proper permissions
-RUN mkdir -p /tmp/moviepy \
-    && chmod -R 777 /tmp/moviepy
+RUN mkdir -p /app/resources/{temp_video,audio,fonts,intro} && \
+    mkdir -p /tmp/moviepy && \
+    mkdir -p /tmp/audio_temp && \
+    chmod -R 777 /app/resources && \
+    chmod -R 777 /tmp/moviepy && \
+    chmod -R 777 /tmp/audio_temp && \
+    chmod -R 777 /tmp
 
 # Copy and install requirements
 COPY requirements.txt .
@@ -30,7 +35,7 @@ RUN pip3 install -r requirements.txt
 # Copy application code
 COPY . .
 
-# Configure ImageMagick
+# Configure ImageMagick with more permissive policy
 RUN mv /etc/ImageMagick-6/policy.xml /etc/ImageMagick-6/policy.xml.bak || true
 RUN echo '<policymap> \
     <policy domain="resource" name="memory" value="512MiB"/> \
@@ -39,18 +44,16 @@ RUN echo '<policymap> \
     <policy domain="resource" name="height" value="16KP"/> \
     <policy domain="resource" name="area" value="256MB"/> \
     <policy domain="resource" name="disk" value="2GiB"/> \
-    <policy domain="delegate" rights="none" pattern="URL" /> \
-    <policy domain="delegate" rights="none" pattern="HTTPS" /> \
-    <policy domain="delegate" rights="none" pattern="HTTP" /> \
     <policy domain="path" rights="read|write" pattern="@*"/> \
+    <policy domain="path" rights="read|write" pattern="/tmp/*"/> \
     </policymap>' > /etc/ImageMagick-6/policy.xml
 
-# Set proper permissions
-RUN chown -R nobody:nogroup /app \
-    && chmod -R 755 /app \
-    && chmod -R 777 /tmp
+# Set proper permissions for the entire application
+RUN chown -R nobody:nogroup /app && \
+    chmod -R 755 /app && \
+    chmod -R 777 /tmp
 
-# Use non-root user
+# Switch to non-root user
 USER nobody
 
 EXPOSE 7860