Allow router to initialize fresh volume ownership

2026-08-21 14:00:40 +02:00
parent 16be3e606f
commit 868b89be1d
1 changed files with 4 additions and 0 deletions
@@ -321,6 +321,10 @@ services:
    networks: [frontend, control, inference]
    security_opt: ["no-new-privileges:true"]
    cap_drop: [ALL]
+    # The entrypoint fixes ownership of fresh named volumes and immediately
+    # drops to uid/gid 10002 via gosu before starting the router. Without this
+    # narrowly scoped capability a clean installation loops before startup.
+    cap_add: [CHOWN]
    depends_on:
      profile-controller:
        condition: service_healthy