Update Dockerfile

Dockerfile

@@ -15,18 +15,37 @@ RUN apt-get update && apt-get install -y \
     git \
     && rm -rf /var/lib/apt/lists/*
 
+# Create app user and group for better security
+RUN groupadd -r appuser && useradd -r -g appuser appuser
+
 # Create necessary directories with proper permissions
 RUN mkdir -p /app/.cache/huggingface/transformers \
     && mkdir -p /app/.streamlit \
-    && chmod -R 777 /app
+    && mkdir -p /app/temp \
+    && mkdir -p /app/src
 
-# Copy files
+# Copy files first
 COPY requirements.txt ./
 COPY src/ ./src/
 
 # Install Python dependencies
 RUN pip install --no-cache-dir -r requirements.txt
 
+# Fix permissions for Qdrant database directory
+# This is the key fix for your issue
+RUN if [ -d "/app/src/qdrant_data_tesla" ]; then \
+        chmod -R 755 /app/src/qdrant_data_tesla && \
+        find /app/src/qdrant_data_tesla -type f -exec chmod 644 {} \; && \
+        find /app/src/qdrant_data_tesla -type d -exec chmod 755 {} \; && \
+        rm -f /app/src/qdrant_data_tesla/.lock; \
+    fi
+
+# Change ownership of the entire app directory to appuser
+RUN chown -R appuser:appuser /app
+
+# Switch to non-root user
+USER appuser
+
 # Expose Streamlit's default port
 EXPOSE 8501
 
@@ -34,6 +53,4 @@ EXPOSE 8501
 HEALTHCHECK CMD curl --fail http://localhost:8501/_stcore/health || exit 1
 
 # Start the Streamlit app
-ENTRYPOINT ["streamlit", "run", "src/streamlit_app.py","--server.enableXsrfProtection=false","--server.port=8501", "--server.address=0.0.0.0"]
-
-
+ENTRYPOINT ["streamlit", "run", "src/streamlit_app.py", "--server.enableXsrfProtection=false", "--server.port=8501", "--server.address=0.0.0.0"]