some refinement

Dockerfile

@@ -30,11 +30,19 @@ FROM alpine:latest
 
 RUN apk --no-cache add ca-certificates
 
-WORKDIR /root/
+# Create non-root user
+RUN addgroup -S appgroup && adduser -S appuser -G appgroup
+
+WORKDIR /home/appuser/
 
 COPY --from=go-builder /go-otel .
 COPY --from=go-builder /app/otel-ui/dist ./dist
 
+# Ensure the appuser owns the files
+RUN chown -R appuser:appgroup /home/appuser/
+
+USER appuser
+
 EXPOSE 8080
 
 CMD ["./go-otel"]