From c298e0165c29b30380466910bb328964a7264c4c Mon Sep 17 00:00:00 2001
From: Cat pony Black <pony@bahnhof.cz>
Date: Sat, 5 Aug 2023 13:10:35 +0200
Subject: [PATCH] Fix config ownership in dockerfile to pass restriction test

---
 Dockerfile                              | 2 +-
 changelog.d/dockerfile-config-perms.fix | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)
 create mode 100644 changelog.d/dockerfile-config-perms.fix

diff --git a/Dockerfile b/Dockerfile
index 310d18104..72c227b76 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -49,7 +49,7 @@ USER pleroma
 
 COPY --from=build --chown=pleroma:0 /release ${HOME}
 
-COPY ./config/docker.exs /etc/pleroma/config.exs
+COPY --chown=pleroma --chmod=640 ./config/docker.exs /etc/pleroma/config.exs
 COPY ./docker-entrypoint.sh ${HOME}
 
 EXPOSE 4000
diff --git a/changelog.d/dockerfile-config-perms.fix b/changelog.d/dockerfile-config-perms.fix
new file mode 100644
index 000000000..49ea5becb
--- /dev/null
+++ b/changelog.d/dockerfile-config-perms.fix
@@ -0,0 +1 @@
+- Fix config ownership in dockerfile to pass restriction test