Update Dockerfile

Dockerfile

@@ -1,20 +1,41 @@
-FROM python:3.13.5-slim
+# Lightweight, widely supported
+FROM python:3.11-slim
 
+# Saner defaults
+ENV PYTHONDONTWRITEBYTECODE=1
+ENV PYTHONUNBUFFERED=1
+
+# Create a non-root user and writable dirs
+ENV HOME=/home/user
+RUN useradd -m -u 1000 user \
+ && mkdir -p /data ${HOME}/.streamlit \
+ && chown -R user:user /data ${HOME}
+
+# Use /app as workdir
 WORKDIR /app
 
-RUN apt-get update && apt-get install -y \
-    build-essential \
-    curl \
-    git \
-    && rm -rf /var/lib/apt/lists/*
+# Send ALL caches to /data (writable & persistent on Spaces)
+ENV XDG_CACHE_HOME=/data/.cache
+ENV HF_HOME=/data/.cache/huggingface
+ENV HUGGINGFACE_HUB_CACHE=/data/.cache/huggingface
+ENV TRANSFORMERS_CACHE=/data/.cache/huggingface/transformers
+
+# Streamlit: avoid writing extra telemetry files
+ENV STREAMLIT_BROWSER_GATHERUSAGESTATS=false
 
-COPY requirements.txt ./
+# Install deps
+COPY requirements.txt .
+RUN pip install --no-cache-dir -r requirements.txt
+
+# Copy source
 COPY src/ ./src/
 
-RUN pip3 install -r requirements.txt
+# Run as non-root
+USER user
 
+# Port & healthcheck expected by the Space (README uses app_port: 8501)
 EXPOSE 8501
+HEALTHCHECK CMD python -c "import urllib.request; urllib.request.urlopen('http://localhost:8501/_stcore/health')" || exit 1
 
-HEALTHCHECK CMD curl --fail http://localhost:8501/_stcore/health
-
-ENTRYPOINT ["streamlit", "run", "src/streamlit_app.py", "--server.port=8501", "--server.address=0.0.0.0"]
+# Launch Streamlit
+CMD ["streamlit", "run", "src/streamlit_app.py", "--server.port=8501", "--server.address=0.0.0.0"]