From abfb28dea224f915e62cf400f49ce2683e564c2b Mon Sep 17 00:00:00 2001
From: Joe Carstairs <me@joeac.net>
Date: Thu, 25 Jun 2026 19:04:12 +0100
Subject: [PATCH] http.Dockerfile: db dir is owned by nginx and mode 600

---
 http.Dockerfile | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/http.Dockerfile b/http.Dockerfile
index c53e630..05440a9 100644
--- a/http.Dockerfile
+++ b/http.Dockerfile
@@ -7,6 +7,7 @@ COPY http/php-fpm.conf /etc/php85/php-fpm.d/joeac.net-http_pool.conf
 COPY http/nginx.conf /etc/nginx/nginx.conf
 CMD mkdir -p "$(dirname "$DB_PATH")" \
   && touch $DB_PATH \
-  && chmod -R g+rw "$(dirname "$DB_PATH")" \
+  && chown -R nginx:nginx "$(dirname "$DB_PATH")" \
+  && chmod -R 600 "$(dirname "$DB_PATH")" \
   && php-fpm85 \
   && nginx -g "daemon off;"