From 35526331fad2d492ad10aca151412e8f2ef2b1cc Mon Sep 17 00:00:00 2001
From: lfox <ferren@gimme.pet>
Date: Sun, 1 Nov 2026 21:47:41 +0000
Subject: [PATCH] fixed permissions issues with deploy watch target

---
 Dockerfile         | 2 +-
 docker-compose.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 816a693..c9f136e 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -23,7 +23,7 @@ ENV HOSTNAME=0.0.0.0
 ENV PORT=3050
 
 RUN addgroup --system --gid 1001 app && \
-    adduser --system --uid 1001 app
+    adduser --system --uid 1001 -G app app
 
 COPY --from=build /app/public ./public
 COPY --from=build --chown=app:app /app/.next/standalone ./
diff --git a/docker-compose.yml b/docker-compose.yml
index 3ad27ab..7c8d943 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -11,7 +11,7 @@ services:
       # Bearer token for POST /api/deploy. Set it in a .env file next to this
       # compose file (gitignored); the route returns 404 when it is unset.
       - DEPLOY_TRIGGER_SECRET=${DEPLOY_TRIGGER_SECRET:-}
-      - DEPLOY_TRIGGER_DIR=${DEPLOY_TRIGGER_DIR:-/deploy-trigger}
+      - DEPLOY_TRIGGER_DIR=/deploy-trigger
     volumes:
       # Shared with scripts/deploy-watch.sh on the host.
       - ./deploy-trigger:/deploy-trigger