Bug Fixes
- Windows Docker crash on startup -- Container crashed in a restart loop with
PermissionError: [Errno 13] Permission denied: '/app/logs/all.log'. Windows bind mounts are root-owned inside the container, but the app runs asappuseraftergosuprivilege drop. Entrypoint nowchowns writable directories before dropping privileges. - CHOWN capability --
cap_drop: ALLremovedCAP_CHOWN, preventing the entrypoint from fixing file ownership. AddedCHOWNtocap_addalongsideSETUID/SETGID. - Dockerfile logs directory --
/app/logscreated with correct ownership at build time. - Lighter healthcheck -- Switched from
httpx(heavy third-party import) to stdliburllib.request, reducing healthcheck startup time and memory overhead.
Upgrading
docker-compose pull
docker-compose up -dNo database migrations required.