Update Dockerfile

Dockerfile

@@ -1,34 +1,29 @@
 FROM python:3.11-slim
 
-# Set working directory
 WORKDIR /app
 
-# Install system dependencies
-RUN apt-get update && apt-get install -y \
-    
-    build-essential \
-    python3-dev \
-    && rm -rf /var/lib/apt/lists/*
+# Playwright saves browsers here during the image build. The same path is then
+# available to the non-root FastAPI process at runtime.
+ENV PYTHONUNBUFFERED=1 \
+    PORT=7860 \
+    PLAYWRIGHT_BROWSERS_PATH=/ms-playwright
 
+# Install the application dependencies first so Docker can cache this layer.
+COPY requirements.txt ./
+RUN pip install --no-cache-dir -r requirements.txt \
+    && python -m playwright install --with-deps chromium \
+    && rm -rf /var/lib/apt/lists/* /root/.cache/pip
 
-# Copy requirements and install Python dependencies
-COPY requirements.txt .
-RUN pip install --no-cache-dir -r requirements.txt
+# Copy the FastAPI application after dependency installation.
+COPY . ./
 
-# Copy application files
-COPY . .
- 
-RUN useradd -m -u 1000 user
+# Avoid running the web app as root. The installed browser path is readable by
+# this user and /tmp remains writable for temporary MP4 output.
+RUN useradd --create-home --uid 1000 appuser \
+    && chown -R appuser:appuser /app /ms-playwright
+USER appuser
 
-RUN chmod -R 777 /app
+EXPOSE 7860
 
-# Set environment variables
-ENV FLASK_APP=app.py
-ENV FLASK_ENV=production
-ENV PORT=7860
-
-# Expose port
-EXPOSE 7860 
-
-# Run the application
-CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]
+# Uses $PORT when a host injects it, and otherwise listens on 7860.
+CMD ["sh", "-c", "uvicorn app:app --host 0.0.0.0 --port ${PORT:-7860}"]