use chown on rsync to /data and /config directories

The lsiown command explicitly avoids touching symlinks, allowing root
owned symlinks to bleed into PUID/PGID controlled areas.

Use the chown arguments when using rsync to copy files to /data and
/config to prevent creating symlinks with root permissions.

Signed-off-by: Randolph Sapp <[email protected]>

Author: StaticRocket

README.md

@@ -347,6 +347,7 @@ Once registered you can define the dockerfile to use with `-f Dockerfile.aarch64
 
 ## Versions
 
+* **18.08.25:** - Use chown on rsync to /data and /config directories.
 * **10.07.25:** - Rebase to Alpine 3.22.
 * **12.02.25:** - Rebase to Alpine 3.21.
 * **09.01.25:** - Fix uploading large files. Existing users should update their nginx confs.

readme-vars.yml

@@ -145,6 +145,7 @@ init_diagram: |
   "nextcloud:latest" <- Base Images
 # changelog
 changelogs:
+  - {date: "18.08.25:", desc: "Use chown on rsync to /data and /config directories."}
   - {date: "10.07.25:", desc: "Rebase to Alpine 3.22."}
   - {date: "12.02.25:", desc: "Rebase to Alpine 3.21."}
   - {date: "09.01.25:", desc: "Fix uploading large files. Existing users should update their nginx confs."}

root/etc/s6-overlay/s6-rc.d/init-nextcloud-config/run

@@ -81,11 +81,11 @@ if [ -f /config/www/nextcloud/config/needs_migration ] || [ -f /tmp/needs_instal
     rsync -rlD --exclude-from=/app/upgrade.exclude /app/www/src/ /app/www/public/
     for dir in apps config themes; do
         if [ -f /config/www/nextcloud/config/needs_migration ] || [ -f /tmp/needs_upgrade ] || [ -z "$(ls -A /app/www/public/${dir} 2>/dev/null)" ]; then
-            rsync -rlD --include "/${dir}" --exclude '/*' /app/www/src/ /config/www/nextcloud/
+            rsync -rlD --chown=abc:abc --include "/${dir}" --exclude '/*' /app/www/src/ /config/www/nextcloud/
         fi
     done
     if [ -z "$(ls -A /data/ 2>/dev/null)" ]; then
-        rsync -rlD --include "/data" --exclude '/*' /app/www/src/ /
+        rsync -rlD --chown=abc:abc --include "/data" --exclude '/*' /app/www/src/ /
     fi
 
     echo "Setting permissions"