Update Dockerfile

Dockerfile

@@ -1,20 +1,39 @@
 FROM python:3.10-slim
 
-ENV PYTHONUNBUFFERED=1
-
 WORKDIR /app
 
+# Install system deps
 RUN apt-get update && apt-get install -y --no-install-recommends \
-    build-essential cmake git wget pkg-config \
-    libopenblas-dev liblapack-dev libgomp1 \
+    build-essential \
+    cmake \
+    git \
+    wget \
+    pkg-config \
+    python3-dev \
+    libopenblas-dev \
+    liblapack-dev \
+    libgomp1 \
+    libffi-dev \
+    libssl-dev \
+    zlib1g-dev \
     && rm -rf /var/lib/apt/lists/*
 
+# Copy requirements and app
 COPY requirements.txt .
-RUN pip install --upgrade pip && pip install --no-cache-dir -r requirements.txt
-
 COPY . .
 
-RUN mkdir -p /app/models && chmod -R 777 /app/models
+# Upgrade pip and install Python deps
+RUN pip install --upgrade pip setuptools wheel
+RUN pip install --no-cache-dir -r requirements.txt
+
+# Ensure models dir exists and is writable by UID 1000 (user below)
+RUN mkdir -p /app/models && chown -R 1000:1000 /app/models
+
+# Create unprivileged user and switch
+RUN useradd -m -u 1000 user || true
+USER user
+ENV HOME=/home/user \
+    PATH=/home/user/.local/bin:$PATH
 
 EXPOSE 7860
 CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]