Update Dockerfile

Dockerfile

@@ -1,17 +1,40 @@
 FROM python:3.10-slim
 
-# Set environment variables
 ENV PYTHONUNBUFFERED=1
 ENV DEBIAN_FRONTEND=noninteractive
 
-# Install system dependencies
 RUN apt-get update && \
     apt-get install -y --no-install-recommends \
         ffmpeg \
         libsm6 \
         libxext6 \
         fontconfig \
-        imagemagick && \
+        imagemagick \
+        ghostscript && \ # Often needed by ImageMagick for text/vector handling
+    # Modify ImageMagick policy to be less restrictive for TextClip
+    # This comments out common restrictive policies. Be aware of security implications if image content is user-supplied.
+    # For a more targeted approach, identify the exact policy causing the block.
+    # Common paths for policy.xml: /etc/ImageMagick-6/policy.xml or /etc/ImageMagick/policy.xml
+    # The path might vary based on ImageMagick version (e.g., ImageMagick-6 or ImageMagick-7)
+    # First, find the policy file path
+    ( \
+        POLICY_FILE=$(find /etc/ImageMagick* -name policy.xml | head -n 1) && \
+        if [ -f "$POLICY_FILE" ]; then \
+            echo "INFO: Modifying ImageMagick policy file: $POLICY_FILE"; \
+            sed -i 's/<policy domain="coder" rights="none" pattern="PS" \/>/<!-- <policy domain="coder" rights="none" pattern="PS" \/> -->/' "$POLICY_FILE"; \
+            sed -i 's/<policy domain="coder" rights="none" pattern="PS2" \/>/<!-- <policy domain="coder" rights="none" pattern="PS2" \/> -->/' "$POLICY_FILE"; \
+            sed -i 's/<policy domain="coder" rights="none" pattern="PS3" \/>/<!-- <policy domain="coder" rights="none" pattern="PS3" \/> -->/' "$POLICY_FILE"; \
+            sed -i 's/<policy domain="coder" rights="none" pattern="EPS" \/>/<!-- <policy domain="coder" rights="none" pattern="EPS" \/> -->/' "$POLICY_FILE"; \
+            sed -i 's/<policy domain="coder" rights="none" pattern="PDF" \/>/<!-- <policy domain="coder" rights="none" pattern="PDF" \/> -->/' "$POLICY_FILE"; \
+            sed -i 's/<policy domain="coder" rights="none" pattern="XPS" \/>/<!-- <policy domain="coder" rights="none" pattern="XPS" \/> -->/' "$POLICY_FILE"; \
+            sed -i 's/<policy domain="coder" rights="none" pattern="LABEL" \/>/<!-- <policy domain="coder" rights="none" pattern="LABEL" \/> -->/' "$POLICY_FILE"; \
+            sed -i 's/<policy domain="coder" rights="none" pattern="TEXT" \/>/<!-- <policy domain="coder" rights="none" pattern="TEXT" \/> -->/' "$POLICY_FILE"; \
+            sed -i 's/<policy domain="path" rights="none" pattern="@*" \/>/<!-- <policy domain="path" rights="none" pattern="@*" \/> -->/' "$POLICY_FILE"; \
+            echo "INFO: ImageMagick policy potentially updated."; \
+        else \
+            echo "WARNING: ImageMagick policy.xml not found. TextClip might fail."; \
+        fi \
+    ) && \
     apt-get clean && \
     rm -rf /var/lib/apt/lists/*
 
@@ -28,31 +51,16 @@ ARG APP_USER_GID=1000
 RUN groupadd --gid $APP_USER_GID appgroup && \
     useradd --uid $APP_USER_UID --gid appgroup --shell /bin/bash --create-home appuser
 
-# Set the working directory
 WORKDIR /home/appuser/app
+COPY --chown=appuser:appgroup requirements.txt ./
 
-# Copy requirements.txt first
-COPY requirements.txt ./ 
+USER appuser
+ENV PATH="/home/appuser/.local/bin:${PATH}" 
 
-# Pip install as root (or default user before USER appuser)
 RUN python -m pip install --no-cache-dir --upgrade pip
 RUN python -m pip install --no-cache-dir -r requirements.txt
 
-# Now copy the rest of the application code
-COPY . .
+COPY --chown=appuser:appgroup . .
 
-# Ensure the entire app directory and its contents are owned by appuser
-# and explicitly create the output directory as root and then chown it.
-RUN mkdir -p /home/appuser/app/temp_cinegen_media && \
-    chown -R appuser:appgroup /home/appuser/app
-
-# Switch to the non-root user
-USER appuser
-# Ensure user's local bin is in PATH for pip-installed executables
-ENV PATH="/home/appuser/.local/bin:${PATH}" 
-
-# Expose Streamlit's default port
 EXPOSE 8501
-
-# Command to run Streamlit
 CMD ["streamlit", "run", "app.py", "--server.headless=true", "--server.port=8501", "--server.fileWatcherType=none"]