Fix Docker permissions and cache directory

Dockerfile

@@ -10,33 +10,36 @@ RUN apt-get update && apt-get install -y \
     curl \
     && rm -rf /var/lib/apt/lists/*
 
-# Create necessary directories
-RUN mkdir -p logs src/static
+# Create necessary directories with proper permissions
+RUN mkdir -p /app/logs /app/src/static /home/user/.cache/huggingface && \
+    chmod -R 777 /app/logs /home/user/.cache/huggingface
+
+# Create non-root user
+RUN useradd -m -u 1000 user && \
+    chown -R user:user /app /home/user/.cache
+
+# Set environment variables
+ENV PYTHONPATH=/app
+ENV PYTHONUNBUFFERED=1
+ENV PYTHONDONTWRITEBYTECODE=1
+ENV PORT=7860
+ENV TRANSFORMERS_CACHE=/home/user/.cache/huggingface
+
+# Switch to non-root user
+USER user
 
 # Upgrade pip and install numpy first
 RUN pip install --upgrade pip
 RUN pip install --no-cache-dir "numpy<2.0.0"
 
 # Copy requirements first to leverage Docker cache
-COPY requirements.txt .
+COPY --chown=user:user requirements.txt .
 
 # Install Python dependencies
 RUN pip install --no-cache-dir -r requirements.txt
 
 # Copy application code
-COPY . .
-
-# Ensure proper permissions for logs directory
-RUN chmod 777 logs
-
-# Set environment variables
-ENV PYTHONPATH=/app
-ENV PYTHONUNBUFFERED=1
-ENV PYTHONDONTWRITEBYTECODE=1
-ENV PORT=7860
-
-# Expose port for Hugging Face Spaces
-EXPOSE 7860
+COPY --chown=user:user . .
 
 # Run the application
 CMD ["python", "-m", "uvicorn", "src.api:app", "--host", "0.0.0.0", "--port", "7860"]