fix: Update Dockerfile and init script to include su-exec for user permissions and install Composer dependencies as www-data user.

Author: terabytesoftw

docker/frankenphp/Dockerfile

@@ -34,10 +34,11 @@ ENV COMPOSER_ALLOW_SUPERUSER=1
 # Change PHP config
 COPY docker/php/php.ini /usr/local/etc/php/conf.d/base.ini
 
-# Install supervisord and Node.js (includes npm)
+# Install supervisord, Node.js, and su-exec
 RUN apt-get update && apt-get install -y \
     supervisor \
     curl \
+    su-exec \
     --no-install-recommends \
     && curl -fsSL https://deb.nodesource.com/setup_lts.x | bash - \
     && apt-get install -y nodejs \

docker/init.sh

@@ -48,18 +48,13 @@ echo -e "${GREEN}Setup completed.${NC}"
 if [ -f "/app/composer.json" ] && [ ! -d "/app/vendor" ]; then
     echo -e "${YELLOW}Installing Composer dependencies...${NC}"
 
-    # Install dependencies based on environment
+    # Install dependencies based on environment AS www-data user
     if [ "$YII_ENV" = "prod" ]; then
         # Production: exclude dev dependencies and optimize autoloader
-        composer install --no-dev --optimize-autoloader --no-interaction
+        su-exec www-data composer install --no-dev --optimize-autoloader --no-interaction
     else
         # Development: include dev dependencies
-        composer install --optimize-autoloader --no-interaction
-    fi
-
-    # Set proper ownership for vendor directory if possible
-    if chown -R www-data:www-data /app/vendor 2>/dev/null; then
-        echo -e "${GREEN}✓ Vendor directory ownership set${NC}"
+        su-exec www-data composer install --optimize-autoloader --no-interaction
     fi
 
     echo -e "${GREEN}✓ Composer dependencies installed successfully.${NC}"