Update Dockerfile

Dockerfile

@@ -3,8 +3,13 @@
 # ──────────────────────────────────────────────
 FROM node:20-slim
 
-# node:20-slim already has a built-in 'node' user at uid 1000
-# DO NOT run useradd — uid 1000 already exists and will error
+# node:20-slim strips CA certificates — MongoDB Atlas TLS will fail without this
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
+  && rm -rf /var/lib/apt/lists/*
+
+# node:20-slim already ships with a 'node' user at uid 1000
+# DO NOT run useradd — uid 1000 already exists and will crash the build
 
 WORKDIR /app
 
@@ -17,12 +22,13 @@ COPY --chown=node:node . .
 
 # Hugging Face Spaces requires port 7860
 ENV PORT=7860
+ENV NODE_OPTIONS=--use-openssl-ca
 EXPOSE 7860
 
 # Use the built-in node user (uid 1000) — required by HF Spaces
 USER node
 
-# HF pings /system to verify the app is healthy
+# HF pings /system to verify the app is alive
 HEALTHCHECK --interval=30s --timeout=10s --start-period=20s \
   CMD node -e "require('http').get('http://localhost:7860/system',r=>{process.exit(r.statusCode===200?0:1)}).on('error',()=>process.exit(1))"