🗃️ Removed the .claude/settings.local.json 🗃️

CLAUDE.md
Dockerfile
.env.scripts
.gitattributes
.gitea/workflows/docker.yaml
.gitignore
LICENSE.md
PLAN.md
README.md
rootfs/root/docker/setup/04-users.sh
rootfs/root/docker/setup/05-custom.sh
rootfs/tmp/
rootfs/usr/local/bin/entrypoint.sh
rootfs/usr/local/bin/pkmgr
rootfs/usr/local/etc/docker/bin/
rootfs/usr/local/etc/docker/init.d/99-apprise.sh
rootfs/usr/local/etc/docker/init.d/zz-default.sh

rootfs/root/docker/setup/04-users.sh

@@ -28,6 +28,15 @@ exitCode=0
 # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
 # Predefined actions
 
+# Defensive: the nginx Alpine package creates the nginx user. Apprise itself
+# has no daemon user — we run as root and let gunicorn handle worker-level
+# privilege drops via PUID/PGID env if the user wants. Add an apprise system
+# user/group for /config/secure ownership.
+if command -v addgroup >/dev/null 2>&1 && command -v adduser >/dev/null 2>&1; then
+  addgroup -S apprise 2>/dev/null || true
+  adduser -S -G apprise -H -h /var/lib/apprise -s /sbin/nologin apprise 2>/dev/null || true
+fi
+
 # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
 # Main script