add: huggingface docker

Dockerfile

@@ -1,6 +1,9 @@
 # Stage 1: Build stage
 FROM node:22-alpine AS builder
 
+# Add user
+RUN useradd -m -u 1000 user
+
 # Set working directory
 WORKDIR /app
 
@@ -33,12 +36,18 @@ RUN mkdir -p /var/cache/nginx/client_temp \
     /var/cache/nginx/proxy_temp \
     /var/cache/nginx/fastcgi_temp \
     /var/cache/nginx/uwsgi_temp \
-    /var/cache/nginx/scgi_temp && \
-    chown -R nginx:nginx /var/cache/nginx && \
-    chmod -R 755 /var/cache/nginx
+    /var/cache/nginx/scgi_temp \
+    /var/run/nginx && \
+    chown -R user:user /var/cache/nginx /var/run/nginx && \
+    chmod -R 755 /var/cache/nginx /var/run/nginx && \
+    touch /var/run/nginx/nginx.pid && \
+    chown user:user /var/run/nginx/nginx.pid
 
 # Expose port 7860 (required by Hugging Face Spaces)
 EXPOSE 7860
 
+# Switch to nginx user for security
+USER user
+
 # Start nginx on port 7860
 CMD ["nginx", "-g", "daemon off;"]

nginx.hf.conf

@@ -1,3 +1,6 @@
+# Set PID file location to writable directory
+pid /var/run/nginx/nginx.pid;
+
 events {
     worker_connections 1024;
 }