rework dockerfile

Dockerfile

@@ -1,28 +1,30 @@
 FROM rocker/shiny-verse:latest
 
-# Create a non-root user to run the application
-RUN adduser --disabled-password --gecos "" appuser
+# Set up a new user named "user" with user ID 1000
+RUN useradd -m -u 1000 user
 
-WORKDIR /code
+# Switch to the "user" user
+USER user
+
+# Set home to the user's home directory
+ENV HOME=/home/user \
+	PATH=/home/user/.local/bin:$PATH
+
+# Set the working directory to the user's home directory
+WORKDIR $HOME/app
+
+# Copy the current directory contents into the container at $HOME/app setting the owner to the user
+COPY --chown=user . $HOME/app
 
 # Install stable packages from CRAN
 RUN install2.r --error \
-    shiny \
     bslib \
     httpuv \
     purrr \
-    glue \
-    httr2
-
-# Set the environment variable for the secret
-ENV OPENAI_API_KEY=${OPENAI_API_KEY}
-
-COPY . .
+    glue 
 
-# Change the ownership of the /code directory to appuser
-RUN chown -R appuser:appuser /code
+RUN --mount=type=secret,id=SECRET_EXAMPLE,mode=0444,required=true
 
-# Switch to the appuser user
-USER appuser
+EXPOSE 7860
 
 CMD ["R", "--quiet", "-e", "shiny::runApp(host='0.0.0.0', port=7860)"]