diff --git a/aurral/Dockerfile b/aurral/Dockerfile
index 4f3e451676..879b026cbe 100644
--- a/aurral/Dockerfile
+++ b/aurral/Dockerfile
@@ -17,9 +17,5 @@ LABEL \
 
 COPY rootfs /
 
-RUN chmod a+x /etc/services.d/aurral/run
-
-# Override the upstream docker-entrypoint.sh which tries to chown host-mounted
-# paths and fails with "Operation not permitted" in the HA supervisor environment.
-# s6-overlay's /init takes over process supervision instead.
-ENTRYPOINT ["/init"]
+RUN chmod a+x /etc/services.d/aurral/run && \
+    chmod a+x /usr/local/bin/docker-entrypoint.sh
diff --git a/aurral/rootfs/usr/local/bin/docker-entrypoint.sh b/aurral/rootfs/usr/local/bin/docker-entrypoint.sh
new file mode 100644
index 0000000000..dd2a6ee3c3
--- /dev/null
+++ b/aurral/rootfs/usr/local/bin/docker-entrypoint.sh
@@ -0,0 +1,6 @@
+#!/bin/sh
+# Replacement for the upstream docker-entrypoint.sh.
+# The upstream version runs chown -R on /app/backend/data which fails when
+# that path is a symlink to a host-mounted HA volume (Operation not permitted).
+# All setup (symlinks, directory creation) is handled by the s6 run script.
+exec "$@"