security fixes and structural improvements

Dockerfile

@@ -19,12 +19,18 @@ RUN go build -o server main.go
 # Final Stage
 FROM alpine:latest
 
-WORKDIR /root/
+# Create non-root user
+RUN addgroup -g 1000 appuser && \
+    adduser -D -u 1000 -G appuser appuser
+
+WORKDIR /home/appuser
 
 COPY --from=builder /app/server .
 
 # Create directory for sqlite db
-RUN mkdir -p data
+RUN mkdir -p data && chown -R appuser:appuser /home/appuser
+
+USER appuser
 
 EXPOSE 8000