Update Dockerfile

Dockerfile

@@ -15,11 +15,8 @@ RUN mkdir -p /app/logs \
     && mkdir -p /app/uploads \
     && mkdir -p /app/model_cache \
     && mkdir -p /app/temp \
-    && chmod -R 777 /app/logs \
-    && chmod -R 777 /app/cache \
-    && chmod -R 777 /app/uploads \
-    && chmod -R 777 /app/model_cache \
-    && chmod -R 777 /app/temp
+    && chown -R nobody:nogroup /app \
+    && chmod -R 777 /app
 
 # Copy requirements first to leverage Docker cache
 COPY requirements.txt .
@@ -42,6 +39,9 @@ ENV HF_HOME=/app/cache
 ENV XDG_CACHE_HOME=/app/cache
 ENV LOG_DIR=/app/logs
 
+# Switch to non-root user
+USER nobody
+
 # Expose port
 EXPOSE 7860