Update Dockerfile

Dockerfile

@@ -1,4 +1,26 @@
-# ... (previous parts: FROM, ENV, apt-get install, font COPY, font cache) ...
+FROM python:3.10-slim
+
+# Set environment variables
+ENV PYTHONUNBUFFERED=1
+ENV DEBIAN_FRONTEND=noninteractive
+
+# Install system dependencies
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends \
+        ffmpeg \
+        libsm6 \
+        libxext6 \
+        fontconfig \
+        imagemagick && \
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/*
+
+# Create directory for custom fonts and copy your font file(s)
+RUN mkdir -p /usr/local/share/fonts/truetype/mycustomfonts
+COPY assets/fonts/arial.ttf /usr/local/share/fonts/truetype/mycustomfonts/arial.ttf 
+
+# Rebuild font cache AFTER copying fonts
+RUN fc-cache -f -s -v
 
 # Create a non-root user and group
 ARG APP_USER_UID=1000
@@ -11,28 +33,23 @@ WORKDIR /home/appuser/app
 
 # Copy requirements.txt first
 COPY requirements.txt ./ 
-# Note: No --chown here yet, let root handle this initial copy for pip cache reasons if any
 
-# Pip install as root (or a user with system-wide install permissions)
-# This avoids issues if some packages need to write to system locations during install
-# and also helps if the user's .local/bin isn't perfectly on PATH immediately
+# Pip install as root (or default user before USER appuser)
 RUN python -m pip install --no-cache-dir --upgrade pip
 RUN python -m pip install --no-cache-dir -r requirements.txt
 
 # Now copy the rest of the application code
 COPY . .
 
-# CRITICAL PERMISSION FIX:
-# After all files are copied, ensure the entire app directory
-# and its contents are owned by appuser and appuser has write permissions.
-# Also, explicitly create the output directory as root and then chown it.
+# Ensure the entire app directory and its contents are owned by appuser
+# and explicitly create the output directory as root and then chown it.
 RUN mkdir -p /home/appuser/app/temp_cinegen_media && \
     chown -R appuser:appgroup /home/appuser/app
-# The chown -R above should cover temp_cinegen_media as well if it's inside /app
 
 # Switch to the non-root user
 USER appuser
-ENV PATH="/home/appuser/.local/bin:${PATH}" # Ensure this is set for appuser
+# Ensure user's local bin is in PATH for pip-installed executables
+ENV PATH="/home/appuser/.local/bin:${PATH}" 
 
 # Expose Streamlit's default port
 EXPOSE 8501