From ad90e5f052e220409a29142516a37b3d27ba705b Mon Sep 17 00:00:00 2001
From: Mark Rapson <git@lzstealth.com>
Date: Sun, 4 Oct 2026 20:46:06 +0100
Subject: [PATCH] Fix data volume permissions at startup

---
 Dockerfile           | 6 +++++-
 docker-entrypoint.sh | 7 +++++++
 2 files changed, 12 insertions(+), 1 deletion(-)
 create mode 100644 docker-entrypoint.sh

diff --git a/Dockerfile b/Dockerfile
index 4059e18..9567605 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,12 +2,16 @@ FROM node:22-alpine
 
 WORKDIR /app
 
+RUN apk add --no-cache su-exec
+
 COPY package.json package-lock.json ./
 RUN npm ci --omit=dev
 
 COPY --chown=node:node . .
-USER node
+COPY docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh
+RUN chmod 755 /usr/local/bin/docker-entrypoint.sh
 
 EXPOSE 3000
 
+ENTRYPOINT ["docker-entrypoint.sh"]
 CMD ["node", "server.js"]
\ No newline at end of file
diff --git a/docker-entrypoint.sh b/docker-entrypoint.sh
new file mode 100644
index 0000000..6736909
--- /dev/null
+++ b/docker-entrypoint.sh
@@ -0,0 +1,7 @@
+#!/bin/sh
+set -eu
+
+mkdir -p /app/data
+chown -R node:node /app/data
+
+exec su-exec node "$@"
\ No newline at end of file