what the fuck

docker/php/Dockerfile

@@ -21,7 +21,7 @@ RUN apk add --no-cache \
       libzip-dev \
       oniguruma-dev \
       libxml2-dev \
-      postgresql-dev \
+      libpq-dev \
       sqlite-dev \
       zlib-dev \
       su-exec

docker/prod/entrypoint.sh

@@ -1,6 +1,16 @@
 #!/bin/sh
 set -eu
 
+prepare_runtime_dirs() {
+    mkdir -p var/cache/prod/asset_mapper var/log var/data public/uploads
+
+    chown -R www-data:www-data var public/uploads
+    chmod -R u+rwX,g+rwX var public/uploads
+
+    # Keep group ownership sticky so subsequent writes inherit www-data group.
+    find var public/uploads -type d -exec chmod g+s {} \;
+}
+
 require_app_secret() {
     if [ -z "${APP_SECRET:-}" ]; then
         echo "APP_SECRET environment variable is required at runtime" >&2
@@ -59,6 +69,7 @@ install_runtime
 if [ -f bin/console ]; then
     require_app_secret
     ensure_jwt_keys
+    prepare_runtime_dirs
 fi
 
 if [ "${RUN_MIGRATIONS_ON_START:-1}" = "1" ] && [ -f bin/console ]; then
@@ -75,10 +86,14 @@ if [ "${RUN_MIGRATIONS_ON_START:-1}" = "1" ] && [ -f bin/console ]; then
     su-exec www-data php bin/console doctrine:migrations:migrate --no-interaction --allow-no-migration
 fi
 
+if [ -f bin/console ]; then
+    su-exec www-data php bin/console app:sync-external-provider --no-interaction
+fi
+
 if [ -f bin/console ]; then
     su-exec www-data php bin/console cache:clear --no-warmup
     su-exec www-data php bin/console cache:warmup
-    chown -R www-data:www-data var
+    prepare_runtime_dirs
 fi
 
 exec "$@"