From fb5b911ea17cfc954c7e580f0df3618ac1faf28f Mon Sep 17 00:00:00 2001
From: Ryan Malloy <ryan@supported.systems>
Date: Fri, 13 Feb 2026 03:43:09 -0700
Subject: [PATCH] Use named volume for notebooks in production

Bind mounts inherit host UID which conflicts with the container's
non-root user. Named volumes are initialized from the image layer,
preserving the chown from the Dockerfile.
---
 docker-compose.prod.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/docker-compose.prod.yml b/docker-compose.prod.yml
index 5620bf6..560ad01 100644
--- a/docker-compose.prod.yml
+++ b/docker-compose.prod.yml
@@ -4,6 +4,8 @@ services:
       context: ./backend
       dockerfile: Dockerfile
       target: prod
+    volumes:
+      - notebooks:/app/notebooks
     expose:
       - "8000"
     networks:
@@ -28,6 +30,9 @@ services:
       caddy: "${SPICEBOOK_DOMAIN:-spicebook.localhost}"
       caddy.reverse_proxy_1: "{{upstreams 4321}}"
 
+volumes:
+  notebooks:
+
 networks:
   caddy:
     external: true