From 868b89be1d5a6a13f94d36d410f5213db34ae353 Mon Sep 17 00:00:00 2001
From: Mikei386 <44135113+Mikei386@users.noreply.github.com>
Date: Fri, 21 Aug 2026 14:00:40 +0200
Subject: [PATCH] Allow router to initialize fresh volume ownership

---
 compose.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/compose.yaml b/compose.yaml
index 15f3ec3..1e5998d 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -321,6 +321,10 @@ services:
     networks: [frontend, control, inference]
     security_opt: ["no-new-privileges:true"]
     cap_drop: [ALL]
+    # The entrypoint fixes ownership of fresh named volumes and immediately
+    # drops to uid/gid 10002 via gosu before starting the router. Without this
+    # narrowly scoped capability a clean installation loops before startup.
+    cap_add: [CHOWN]
     depends_on:
       profile-controller:
         condition: service_healthy