Update Dockerfile

Dockerfile

@@ -1,19 +1,28 @@
 FROM python:3.10-slim
 
-# Dépendances système minimales
-RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates && \
+# Deps système
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    git ca-certificates && \
     rm -rf /var/lib/apt/lists/*
 
-# Evite le cache pip, logs non-bufferisés
+# User 'user' (comme HF)
+RUN useradd -m -u 1000 user || true
+USER user
+
+# Confort Python
 ENV PIP_NO_CACHE_DIR=1 PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1
 
-# Copie et install des deps Python
-COPY requirements.txt /tmp/requirements.txt
+# Install deps Python
+COPY --chown=user:user requirements.txt /tmp/requirements.txt
 RUN pip install --no-cache-dir -r /tmp/requirements.txt
 
-# Copie du code (la Space a déjà cloné le repo dans le contexte de build)
-WORKDIR /app
-COPY . /app
+# Workspace
+ENV WORKSPACE=/home/user/workspace
+WORKDIR ${WORKSPACE}
+
+# Entrypoint = script qui clone + lance uvicorn
+COPY --chown=user:user entrypoint.sh /usr/local/bin/entrypoint.sh
+RUN chmod +x /usr/local/bin/entrypoint.sh
 
 EXPOSE 7860
-CMD ["uvicorn", "rfp_api_app:app", "--host", "0.0.0.0", "--port", "7860"]
+CMD ["/usr/local/bin/entrypoint.sh"]