From 51e3fa8a463f8b4ee21cdcdf2fe8c53edc81435e Mon Sep 17 00:00:00 2001
From: Trusted Computer <75872475+trustedcomputer@users.noreply.github.com>
Date: Tue, 24 Mar 2026 18:48:20 -0700
Subject: [PATCH] fix: copy security_headers.conf before chown

---
 images/custom/Containerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/images/custom/Containerfile b/images/custom/Containerfile
index b72af438..a8298b52 100644
--- a/images/custom/Containerfile
+++ b/images/custom/Containerfile
@@ -4,6 +4,7 @@ FROM python:${PYTHON_VERSION}-slim-${DEBIAN_BASE} AS base
 
 COPY resources/core/nginx/nginx-template.conf /templates/nginx/frappe.conf.template
 COPY resources/core/nginx/nginx-entrypoint.sh /usr/local/bin/nginx-entrypoint.sh
+COPY resources/core/nginx/security_headers.conf /etc/nginx/snippets/security_headers.conf
 
 ARG WKHTMLTOPDF_VERSION=0.12.6.1-3
 ARG WKHTMLTOPDF_DISTRO=bookworm
@@ -78,7 +79,6 @@ RUN useradd -ms /bin/bash frappe \
     && chmod 755 /usr/local/bin/nginx-entrypoint.sh \
     && chmod 644 /templates/nginx/frappe.conf.template
 
-COPY resources/core/nginx/security_headers.conf /etc/nginx/snippets/security_headers.conf
 
 FROM base AS builder