Merge pull request 'fix(deploy): push through a TLS-terminating proxy, not raw Gitea HTTP' (#9 ) from fix/deploy-registry-tls into main

Reviewed-on: #9
docs(deploy): note the /data uid/gid-mismatch trap on first start
2026-09-21 22:15:04 -04:00 · 2026-09-21 21:08:03 -04:00 · 2026-09-21 20:58:36 -04:00
1 changed files with 7 additions and 0 deletions
@@ -63,6 +63,13 @@ the same values, there's no separate migration-time config anymore (docs/DECISIO
 |---|---|
 | `/data` | The SQLite database file. Will also hold the content-addressed blob store once Phase 1 builds ingestion. This is the only thing that needs backing up. |

+The container runs as a fixed non-root user (uid/gid `999`), not root and not Unraid's usual
+`nobody:users` (99:100). If `/data`'s host directory doesn't already exist, Docker/Unraid creates
+it owned by `nobody:users` with no write access for other users — the container starts, but
+uvicorn fails immediately with `sqlite3.OperationalError: unable to open database file`, since it
+can't create the SQLite file inside a directory it can't write to. Fix once, before first start:
+`chown -R 999:999 <host path>` (e.g. `/mnt/user/appdata/velodrome` on Unraid).
+
 ## Unraid

 Import `unraid-template.xml` from the Docker tab's "Add Container" template picker — it exposes
Author	SHA1	Message	Date
BBergle	3b80034f0e	Merge pull request 'fix(deploy): push through a TLS-terminating proxy, not raw Gitea HTTP' (#9 ) from fix/deploy-registry-tls into main CI / Repo hygiene (push) Successful in 1s Details CI / Web (lint, typecheck, build) (push) Successful in 15s Details CI / Migrations reversible (push) Successful in 5s Details CI / API (lint, types, tests) (push) Successful in 54s Details Release image / Build and push single-container image (push) Successful in 1m39s Details Reviewed-on: #9	2026-09-21 22:15:04 -04:00
BBergleandClaude Sonnet 5	6b0f28cf74	docs(deploy): note the /data uid/gid-mismatch trap on first start CI / Repo hygiene (pull_request) Successful in 2s Details CI / Web (lint, typecheck, build) (pull_request) Successful in 14s Details CI / Migrations reversible (pull_request) Successful in 6s Details CI / API (lint, types, tests) (pull_request) Successful in 54s Details Hit this deploying to the real Unraid host: the container runs as a fixed non-root uid/gid (999), not root and not Unraid's usual nobody:users (99:100). A freshly-created appdata directory is owned by nobody:users with no write access for anyone else, so the container starts but uvicorn fails immediately with "unable to open database file" — not obvious from the error alone, worth documenting once rather than re-debugging it later. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01R2ZKeWkZV7ehf7fivrAkkG	2026-09-21 21:08:03 -04:00
BBergle	8278d96875	Merge pull request 'fix(deploy): default the Unraid template's host port off 8080' (#7 ) from fix/deploy-unraid-template-port into main CI / Repo hygiene (push) Successful in 3s Details CI / Web (lint, typecheck, build) (push) Successful in 22s Details CI / Migrations reversible (push) Successful in 9s Details CI / API (lint, types, tests) (push) Successful in 1m5s Details Reviewed-on: #7	2026-09-21 20:58:36 -04:00