fix

.gitignore

@@ -4,3 +4,4 @@
 __pycache__
 *.pyc
 *.log
+.cache

Dockerfile

@@ -3,17 +3,28 @@ FROM python:3.10.9
 # Set working directory
 WORKDIR /app
 
+# Create a non-root user
+RUN useradd -m -u 1000 user
+USER user
+
+# Set home directory for user
+ENV HOME=/home/user
+
+# Set Hugging Face cache directory
+ENV HF_HOME=$HOME/.cache/huggingface
+RUN mkdir -p $HF_HOME
+
 # Copy requirements first for better caching
-COPY requirements.txt .
+COPY --chown=user:user requirements.txt .
 
 # Install dependencies
 RUN pip install --no-cache-dir --upgrade -r requirements.txt
 
 # Copy application files
-COPY . .
+COPY --chown=user:user . .
 
-# Expose port 7860 (Hugging Face Spaces default)
+# Expose port 7860
 EXPOSE 7860
 
 # Run the FastAPI application
-CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]
+CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]