fix: use existing node user (UID 1000) instead of creating new user

node:20-slim already has node user with UID 1000, useradd fails.
Replace all user references with node user.

Dockerfile

@@ -20,19 +20,20 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 # Install tsx globally
 RUN npm install -g tsx
 
-# --- Create user with UID 1000 (HF Space requirement) ---
-RUN useradd -m -u 1000 user
+# --- node user already has UID 1000 in node:20-slim ---
+# Ensure home directory exists
+RUN mkdir -p /home/node && chown node:node /home/node
 
 # --- Configure PostgreSQL to run as user (UID 1000) ---
-ENV PGDATA=/home/user/pgdata
-RUN mkdir -p $PGDATA /home/user/run/postgresql \
-    && chown -R user:user $PGDATA /home/user/run/postgresql \
+ENV PGDATA=/home/node/pgdata
+RUN mkdir -p $PGDATA /home/node/run/postgresql \
+    && chown -R node:node $PGDATA /home/node/run/postgresql \
     && chmod 700 $PGDATA
 
 # Initialize PostgreSQL as user
-USER user
+USER node
 RUN /usr/lib/postgresql/15/bin/initdb -D $PGDATA \
-    && echo "unix_socket_directories = '/home/user/run/postgresql'" >> $PGDATA/postgresql.conf \
+    && echo "unix_socket_directories = '/home/node/run/postgresql'" >> $PGDATA/postgresql.conf \
     && echo "listen_addresses = '127.0.0.1'" >> $PGDATA/postgresql.conf \
     && echo "port = 5432" >> $PGDATA/postgresql.conf \
     && echo "local all all trust" > $PGDATA/pg_hba.conf \
@@ -41,22 +42,22 @@ USER root
 
 # --- Configure nginx ---
 RUN mkdir -p /var/log/nginx /var/lib/nginx/body /var/lib/nginx/proxy /var/lib/nginx/fastcgi \
-    && chown -R user:user /var/log/nginx /var/lib/nginx /run /etc/nginx
+    && chown -R node:node /var/log/nginx /var/lib/nginx /run /etc/nginx
 
 # --- Set up app directory ---
-ENV HOME=/home/user
-WORKDIR /home/user/app
+ENV HOME=/home/node
+WORKDIR /home/node/app
 
 # --- cluster-server: install production deps ---
-COPY --chown=user backend/cluster-server/package.json backend/cluster-server/package-lock.json* ./backend/cluster-server/
+COPY --chown=node backend/cluster-server/package.json backend/cluster-server/package-lock.json* ./backend/cluster-server/
 RUN cd backend/cluster-server && npm ci --omit=dev --legacy-peer-deps 2>/dev/null || npm install --omit=dev --legacy-peer-deps
 
 # --- omr bundle (pre-built) ---
-COPY --chown=user backend/omr/package.json ./backend/omr/
-COPY --chown=user backend/omr/dist/ ./backend/omr/dist/
+COPY --chown=node backend/omr/package.json ./backend/omr/
+COPY --chown=node backend/omr/dist/ ./backend/omr/dist/
 
 # --- omr-service: install production deps ---
-COPY --chown=user backend/omr-service/package.json backend/omr-service/package-lock.json* ./backend/omr-service/
+COPY --chown=node backend/omr-service/package.json backend/omr-service/package-lock.json* ./backend/omr-service/
 RUN cd backend/omr-service && ONNXRUNTIME_NODE_INSTALL=skip npm install --omit=dev 2>/dev/null \
     && rm -rf node_modules/onnxruntime-node/node_modules/onnxruntime-common 2>/dev/null; true
 
@@ -68,34 +69,34 @@ RUN npm init -y > /dev/null 2>&1 \
        > /dev/null 2>&1; true
 
 # --- Copy pre-built frontend ---
-COPY --chown=user dist/ ./dist/
+COPY --chown=node dist/ ./dist/
 
 # --- Copy cluster-server dist ---
-COPY --chown=user backend/cluster-server/dist/ ./backend/cluster-server/dist/
-RUN ln -sf /home/user/app/backend/cluster-server/dist/src/migrations /home/user/app/backend/cluster-server/dist/migrations
+COPY --chown=node backend/cluster-server/dist/ ./backend/cluster-server/dist/
+RUN ln -sf /home/node/app/backend/cluster-server/dist/src/migrations /home/node/app/backend/cluster-server/dist/migrations
 
 # --- Copy omr-service source ---
-COPY --chown=user backend/omr-service/src/ ./backend/omr-service/src/
-COPY --chown=user backend/omr-service/tsconfig.json ./backend/omr-service/
+COPY --chown=node backend/omr-service/src/ ./backend/omr-service/src/
+COPY --chown=node backend/omr-service/tsconfig.json ./backend/omr-service/
 
 # --- Gauge renderer and shared files ---
-COPY --chown=user backend/libs/gauge-renderer.ts ./backend/libs/
-COPY --chown=user backend/omr/src/gauge-server.ts ./backend/omr/src/
-COPY --chown=user src/pages/playground/scripts/shaders.ts ./src/pages/playground/scripts/
-RUN ln -sf /home/user/app/backend/omr-service/node_modules /home/user/app/backend/node_modules
+COPY --chown=node backend/libs/gauge-renderer.ts ./backend/libs/
+COPY --chown=node backend/omr/src/gauge-server.ts ./backend/omr/src/
+COPY --chown=node src/pages/playground/scripts/shaders.ts ./src/pages/playground/scripts/
+RUN ln -sf /home/node/app/backend/omr-service/node_modules /home/node/app/backend/node_modules
 
 # --- Root tsconfig ---
-COPY --chown=user tsconfig.json ./
+COPY --chown=node tsconfig.json ./
 
 # --- Config files ---
-COPY --chown=user docker-entrypoint.sh ./docker-entrypoint.sh
-COPY --chown=user nginx.conf /etc/nginx/nginx.conf
+COPY --chown=node docker-entrypoint.sh ./docker-entrypoint.sh
+COPY --chown=node nginx.conf /etc/nginx/nginx.conf
 RUN chmod +x docker-entrypoint.sh
 
 # Directories
-RUN mkdir -p /tmp/starry-uploads && chown user:user /tmp/starry-uploads
+RUN mkdir -p /tmp/starry-uploads && chown node:node /tmp/starry-uploads
 
-USER user
+USER node
 
 EXPOSE 7860
 

docker-entrypoint.sh

@@ -5,7 +5,7 @@ echo '=== STARRY HF Space Entrypoint ==='
 
 # ── Start PostgreSQL ──
 echo 'Starting PostgreSQL...'
-/usr/lib/postgresql/15/bin/pg_ctl -D $PGDATA -l /home/user/postgresql.log start -o "-p 5432"
+/usr/lib/postgresql/15/bin/pg_ctl -D $PGDATA -l /home/node/postgresql.log start -o "-p 5432"
 
 for i in $(seq 1 15); do
   if /usr/lib/postgresql/15/bin/pg_isready -h 127.0.0.1 -p 5432 -q 2>/dev/null; then
@@ -22,23 +22,23 @@ done
 
 # ── Run database migrations ──
 echo 'Running database migrations...'
-cd /home/user/app/backend/omr-service
-DB_HOST=127.0.0.1 DB_PORT=5432 DB_NAME=starry_omr DB_USER=user DB_PASSWORD= \
+cd /home/node/app/backend/omr-service
+DB_HOST=127.0.0.1 DB_PORT=5432 DB_NAME=starry_omr DB_USER=node DB_PASSWORD= \
   npx tsx src/db/migrate.ts 2>&1 || echo 'Warning: Migration failed or skipped'
 
 # ── Start cluster-server (port 3999) ──
 echo 'Starting cluster-server on port 3999...'
-cd /home/user/app/backend/cluster-server
+cd /home/node/app/backend/cluster-server
 PORT=3999 node dist/src/main.js &
 
 # ── Start omr-service (port 3080) ──
 echo 'Starting omr-service on port 3080...'
-cd /home/user/app/backend/omr-service
+cd /home/node/app/backend/omr-service
 export PORT=3080
 export DB_HOST=127.0.0.1
 export DB_PORT=5432
 export DB_NAME=starry_omr
-export DB_USER=user
+export DB_USER=node
 export DB_PASSWORD=
 export REGULATION_ENABLED=false
 npx tsx src/index.ts &

nginx.conf

@@ -1,5 +1,5 @@
 worker_processes 1;
-pid /home/user/nginx.pid;
+pid /home/node/nginx.pid;
 error_log /var/log/nginx/error.log;
 
 events {