Update Dockerfile

Dockerfile

@@ -1,32 +1,40 @@
-# Use a slim Python base image
+# Use Python 3.9 slim image as base
 FROM python:3.9-slim
 
-# Set the working directory in the container
+# Set working directory
 WORKDIR /app
 
-# Install system dependencies needed by RDKit and other libraries *before* anything else.
-# This ensures required libraries like libXrender are available.
+# Install system dependencies required for RDKit and other packages
 RUN apt-get update && apt-get install -y \
-    build-essential \
-    libxrender1 \
-    libfontconfig1 \
-    libxext6 \
+    gcc \
+    g++ \
+    libssl-dev \
+    libffi-dev \
+    libxml2-dev \
+    libxslt-dev \
     && rm -rf /var/lib/apt/lists/*
 
-# Copy the requirements file into the container
-COPY requirements.txt ./requirements.txt
+# Copy requirements first for better Docker layer caching
+COPY requirements.txt .
 
-# Install the Python dependencies
-RUN pip install --no-cache-dir --upgrade pip && \
-    pip install --no-cache-dir -r requirements.txt
+# Install Python dependencies
+RUN pip install --no-cache-dir -r requirements.txt
 
-# Copy the rest of your application's code into the container
+# Copy the application code
 COPY . .
 
-# Expose the port that Streamlit will run on (Hugging Face default is 7860)
+# Create a non-root user for security
+RUN useradd -m -u 1000 appuser && chown -R appuser:appuser /app
+USER appuser
+
+# Expose the port that Streamlit uses
 EXPOSE 7860
 
-# Command to run the Streamlit app
-# - Add --server.gatherUsageStats=false to prevent the permission error.
-# - The --server.headless=true flag is recommended for containerized environments.
-CMD ["streamlit", "run", "app.py", "--server.port=7860", "--server.headless=true", "--server.gatherUsageStats=false"]
+# Set environment variables for Streamlit
+ENV STREAMLIT_SERVER_ADDRESS=0.0.0.0
+ENV STREAMLIT_SERVER_PORT=7860
+ENV STREAMLIT_SERVER_HEADLESS=true
+ENV STREAMLIT_BROWSER_GATHER_USAGE_STATS=false
+
+# Command to run the application
+CMD ["streamlit", "run", "app.py", "--server.port=7860", "--server.address=0.0.0.0"]