From 5b932aa56590251c13aaf720c9379946c627421e Mon Sep 17 00:00:00 2001
From: Hosteroid <office@hosteroid.uk>
Date: Wed, 5 Nov 2025 12:44:59 +0200
Subject: [PATCH] Update bootstrap.sh

---
 domain-monitor-docker/bootstrap.sh | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/domain-monitor-docker/bootstrap.sh b/domain-monitor-docker/bootstrap.sh
index 41ff32d..d2c6225 100644
--- a/domain-monitor-docker/bootstrap.sh
+++ b/domain-monitor-docker/bootstrap.sh
@@ -117,8 +117,12 @@ done
 # Allow installer to create .installed at project root
 chmod 775 "$APP_DIR"
 
-# .env readable by root & group only
-chmod 640 "$APP_DIR/.env" || true
+# .env must be writable by www-data (installer needs to write encryption key)
+if [ -f "$APP_DIR/.env" ]; then
+  echo "   - Making .env writable by ${WWW_UID}:${WWW_GID} for installation"
+  chown ${WWW_UID}:${WWW_GID} "$APP_DIR/.env"
+  chmod 660 "$APP_DIR/.env"
+fi
 
 # Install vendors via Composer container
 echo "==> Installing Composer vendors (composer:2) ..."