Update dockerfile

dockerfile

@@ -1,31 +1,36 @@
+# 1. Base Image
 FROM python:3.10-slim
 
-WORKDIR /app
+# 2. Set up a non-root user
+RUN useradd -m -u 1000 user
+USER user
 
-# Install system dependencies
-RUN apt-get update && apt-get install -y \
-    build-essential \
-    curl \
-    && rm -rf /var/lib/apt/lists/*
+# 3. Set Environment Variables & Working Directory
+ENV HOME=/home/user
+ENV PATH=$HOME/.local/bin:$PATH
+WORKDIR $HOME/app
 
-# Copy requirements first for better caching
-COPY requirements.txt .
+# 4. Copy requirements first for better Docker layer caching
+COPY --chown=user requirements.txt .
 
-# Install Python dependencies
-RUN pip install --no-cache-dir -r requirements.txt
+# 5. Install Python dependencies for the non-root user
+RUN pip install --no-cache-dir --user -r requirements.txt
 
-# Copy application code
-COPY app.py .
+# 6. Download the model during the build process
+# Ini memastikan model sudah ada di dalam image dan tidak diunduh setiap kali Space startup
+RUN huggingface-cli download Dnfs/gema-4b-indra10k-model1-Q4_K_M-GGUF \
+    --local-dir ./model \
+    --local-dir-use-symlinks False
 
-# Create cache directory
-RUN mkdir -p /root/.cache/huggingface
+# 7. Copy the rest of the application code
+COPY --chown=user app.py .
 
-# Expose port
+# 8. Expose the port the app runs on
 EXPOSE 8000
 
-# Health check
+# 9. Health check to ensure the app is running
 HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
   CMD curl -f http://localhost:8000/health || exit 1
 
-# Run the application
+# 10. Command to run the application
 CMD ["python", "app.py"]