Update Dockerfile to set up user permissions and working directory

Dockerfile

@@ -1,20 +1,29 @@
 # Use an official Python runtime as a parent image
 FROM python:3.11.5-bookworm
 
-# Create the directory (if it doesn't already exist)
-RUN mkdir -p /usr/src/app
+# The next few lines come from here: https://huggingface.co/docs/hub/spaces-sdks-docker#permissions
+# Set up a new user named "user" with user ID 1000
+RUN useradd -m -u 1000 user
 
-# Change permissions for /usr/src/app to read/write/execute
-RUN chmod -R 777 /usr/src/app
+# Switch to the "user" user
+USER user
 
-# Set the working directory in the container
-WORKDIR /usr/src/app
+# Set home to the user's home directory
+ENV HOME=/home/user \
+	PATH=/home/user/.local/bin:$PATH
+
+# Change permissions for to read/write/execute
+RUN mkdir -p $HOME/app
+RUN chmod 777 $HOME/app
+
+# Set the working directory to the user's home directory
+WORKDIR $HOME/app
 
 # Install poetry
 RUN pip3 install poetry
 
 # Copy only the necessary files for installing dependencies
-COPY pyproject.toml poetry.lock ./
+COPY --chown=user pyproject.toml poetry.lock ./
 
 # Disable virtual environments creation by Poetry
 # as the Docker container itself is an isolated environment
@@ -24,8 +33,8 @@ RUN poetry config virtualenvs.create false
 # RUN pip3 install -r requirements.txt
 RUN poetry install
 
-# Copy the current directory contents into the container at /usr/src/app
-COPY . .
+# Copy the current directory contents into the container
+COPY --chown=user . $HOME/app
 
 # Make a port available to the world outside this container
 # The EXPOSE instruction informs Docker that the container listens on the specified network ports at runtime. Your container needs to listen to Streamlit’s (default) port 8501.
@@ -35,7 +44,7 @@ EXPOSE 8501
 HEALTHCHECK CMD curl --fail http://localhost:8501/_stcore/health
 
 # Update working directory to be consistent with where Start.py is
-WORKDIR /usr/src/app/scripts
+WORKDIR $HOME/app/scripts
 
 # An ENTRYPOINT allows you to configure a container that will run as an executable. Here, it also contains the entire streamlit run command for your app, so you don’t have to call it from the command line
 ENTRYPOINT ["streamlit", "run", "Start.py", "--server.port=8501", "--server.address=0.0.0.0"]