circumvent permission issues

docker/Caddyfile

@@ -29,7 +29,7 @@
 
 	# Proxy all other requests to Gunicorn
 	handle {
-		reverse_proxy unix//run/gunicorn.sock
+		reverse_proxy unix//app/run/gunicorn.sock
 	}
 
 	respond /healthz "OK" 200

docker/run.sh

@@ -1,14 +1,13 @@
 #!/bin/sh -e
 
 # Create required directories with appropriate permissions
-mkdir -p /run/caddy /run/gunicorn
-chmod 777 /run /run/caddy /run/gunicorn
+mkdir -p /app/run/caddy /app/run/gunicorn
 
 echo "Applying database migrations"
 python -m hub migrate
 
 echo "Starting Caddy"
-caddy start --config /etc/caddy/Caddyfile --pidfile /run/caddy/caddy.pid
+caddy start --config /etc/caddy/Caddyfile --pidfile /app/run/caddy/caddy.pid
 
 echo "Starting Gunicorn"
 exec \
@@ -18,5 +17,5 @@ exec \
     --error-log - \
     --capture-output \
     --pythonpath /app/.venv/lib/python3.13/site-packages/ \
-    --bind unix:/run/gunicorn.sock \
+    --bind unix:/app/run/gunicorn.sock \
     hub.wsgi:application