refactor: improve encryption robustness and container security standards

Author: RinZ27

Dockerfile

@@ -2,6 +2,9 @@ FROM python:3.12-slim
 
 WORKDIR /app
 
+# Create a non-root user and ensure data directory exists
+RUN useradd -m -u 1000 edb && mkdir -p /data && chown edb:edb /data
+
 COPY pyproject.toml .
 COPY src/ src/
 
@@ -13,6 +16,7 @@ ENV EDB_DB_PATH=/data/edb.db
 ENV EDB_API_HOST=0.0.0.0
 ENV EDB_API_PORT=8000
 
+USER edb
 VOLUME /data
 
 CMD ["edb", "serve"]