fix(server): refuse unwritable database in maintenance scripts (#2933)

This commit is contained in:
roopesh
2026-11-02 01:32:18 +05:30
committed by Maurice
parent 94c2ef35b5
commit 1625a10424
5 changed files with 145 additions and 6 deletions
+3 -1
View File
@@ -61,9 +61,11 @@ Use `scripts/migrate-encryption.ts` to re-encrypt the stored secrets listed belo
**Docker:**
```bash
docker exec -it -w /app/server trek node --import tsx scripts/migrate-encryption.ts
docker exec -it -u node -w /app/server trek node --import tsx scripts/migrate-encryption.ts
```
Run it as `node`; a plain `docker exec` runs as root, which the shipped compose file (`cap_drop: ALL`) stops from writing `/app/data`.
**Host (run from the `server/` directory):**
```bash