Update Dockerfile

Dockerfile

@@ -1,29 +1,31 @@
-FROM python:3.10-slim
-
-# The wkhtmltox "bullseye" package from this source is misconfigured and incorrectly
-# depends on libssl1.1 instead of libssl3.
-# We must manually install libssl1.1 from the older Debian "Buster" repository to satisfy this flawed dependency.
-RUN apt-get update && \
-    apt-get install -y --no-install-recommends wget && \
-    # 1. Manually download and install the missing dependency
-    wget http://deb.debian.org/debian/pool/main/o/openssl/libssl1.1_1.1.1w-0+deb10u1_amd64.deb && \
-    dpkg -i libssl1.1_1.1.1w-0+deb10u1_amd64.deb && \
-    # 2. Download the user-specified wkhtmltox package
-    wget https://github.com/wkhtmltopdf/packaging/releases/download/0.12.6.1-2/wkhtmltox_0.12.6.1-2.bullseye_amd64.deb && \
-    # 3. Install it. 'apt' will handle other dependencies and now finds the libssl1.1 we just added.
-    apt install -y ./wkhtmltox_0.12.6.1-2.bullseye_amd64.deb && \
-    # 4. Clean up all downloaded .deb files and temporary packages to keep the image small
-    rm ./*.deb && \
-    apt-get purge -y --auto-remove wget && \
-    rm -rf /var/lib/apt/lists/*
+# Use a compatible Python base image
+FROM python:3.9-slim-bookworm
 
+# Set the working directory inside the container
 WORKDIR /app
+
+# First, copy and install Python packages to leverage Docker layer caching
 COPY requirements.txt .
 RUN pip install --no-cache-dir -r requirements.txt
-COPY . .
 
-# Ensure the temp directory is writable (uncomment if needed)
-# RUN mkdir -p /app/temp && chmod -R 777 /app/temp
+# Now, install Playwright's system dependencies and the Chromium browser
+# This is much cleaner and more reliable than the wkhtmltopdf process.
+RUN playwright install-deps
+RUN playwright install chromium
+
+# Create non-root user as required by HF Spaces
+RUN useradd -m -u 1000 user
+
+# Copy application files (before switching user)
+COPY --chown=1000:1000 app.py .
+
+# Switch to non-root user and set environment
+USER user
+ENV HOME=/home/user \
+    PATH=/home/user/.local/bin:$PATH
+
+# Expose the port
+EXPOSE 7860
 
-ENV PORT=7860
-CMD ["python", "app.py"]
+# Run with gunicorn
+CMD ["gunicorn", "--bind", "0.0.0.0:7860", "app:app"]