From 3001fa2576f1b8cbc26674ce9b6a8adc295128ec Mon Sep 17 00:00:00 2001
From: Alexandre <44178713+alexbelgium@users.noreply.github.com>
Date: Wed, 16 Jul 2025 15:33:39 +0200
Subject: [PATCH] Update run

---
 ente/rootfs/etc/services.d/00-postgres/run | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/ente/rootfs/etc/services.d/00-postgres/run b/ente/rootfs/etc/services.d/00-postgres/run
index bcf9b6927..d26e4023d 100644
--- a/ente/rootfs/etc/services.d/00-postgres/run
+++ b/ente/rootfs/etc/services.d/00-postgres/run
@@ -16,8 +16,10 @@ chmod 775 /run/postgresql
 PGDATA="${PGDATA:-/config/postgres-data}"
 export PGDATA
 
-mkdir -p "${PGDATA}"
-chown -R postgres:postgres "${PGDATA}"
+# Create and secure PGDATA
+mkdir -p "$PGDATA"
+chown -R postgres:postgres "$PGDATA"
+chmod 0700 "$PGDATA"
 
 INITDB="$(command -v initdb || echo /usr/bin/initdb)"
 POSTGRES="$(command -v postgres || echo /usr/bin/postgres)"