From 8094cbb8f7a3426aaaad1d2d97efd5fa81070b1b Mon Sep 17 00:00:00 2001
From: Trevor1985 <shadow85@list.ru>
Date: Sun, 13 Sep 2026 19:58:19 +0900
Subject: [PATCH] Preserve the production network and normalize runtime image
 permissions

---
 Dockerfile         | 1 +
 docker-compose.yml | 7 +++++++
 2 files changed, 8 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index 4fe89f8..cae31ba 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -48,6 +48,7 @@ COPY --chown=lottery:lottery main.py alembic.ini ./
 
 # Создаем необходимые директории
 RUN mkdir -p /app/logs /app/data && \
+    chmod -R u=rwX,go=rX /app && \
     chown -R lottery:lottery /app
 
 # Переключаемся на непривилегированного пользователя
diff --git a/docker-compose.yml b/docker-compose.yml
index 03d8462..163da29 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -4,6 +4,7 @@ services:
     profiles: [local-db]
     image: postgres:16-alpine
     restart: unless-stopped
+    networks: [lottery_network]
     environment:
       POSTGRES_DB: ${POSTGRES_DB:-lottery_bot}
       POSTGRES_USER: ${POSTGRES_USER:-lottery_bot}
@@ -21,6 +22,7 @@ services:
     image: redis:7-alpine
     container_name: lottery_redis
     restart: unless-stopped
+    networks: [lottery_network]
     command: redis-server --appendonly yes
     volumes:
       - redis_data:/data
@@ -35,6 +37,7 @@ services:
     build: .
     container_name: lottery_bot
     restart: unless-stopped
+    networks: [lottery_network]
     init: true
     env_file: .env.prod
     environment:
@@ -56,3 +59,7 @@ volumes:
   bot_data:
   postgres_data:
   redis_data:
+
+networks:
+  lottery_network:
+    driver: bridge