From d3960ab7c5d82db52a3485b27ae84d031885a114 Mon Sep 17 00:00:00 2001
From: MickLesk <47820557+MickLesk@users.noreply.github.com>
Date: Fri, 4 Sep 2026 10:18:14 +0200
Subject: [PATCH] authentik: scope blueprints chown to avoid recursing into the
 mp0 bind mount

---
 ct/authentik.sh | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/ct/authentik.sh b/ct/authentik.sh
index ff587b374..120ce57ba 100644
--- a/ct/authentik.sh
+++ b/ct/authentik.sh
@@ -88,7 +88,7 @@ function update_script() {
       msg_info "Moving blueprints to presistent directory"
       cp -r /opt/authentik/blueprints /opt/authentik-data/
       rm -r /opt/authentik/blueprints
-      chown -Rf authentik:authentik /opt/authentik-data
+      chown -Rf authentik:authentik /opt/authentik-data/blueprints
       yq -i ".blueprints_dir = \"/opt/authentik-data/blueprints\"" /etc/authentik/config.yml
       msg_ok "blueprints moved to presistent directory"
       msg_warn "The blueprints provided by authentik are always overwritten when updated! Only manually created custom blueprints remain unchanged between updates."
@@ -155,8 +155,8 @@ function update_script() {
 
     cp -r /opt/authentik/blueprints /opt/authentik-data/
     rm -r /opt/authentik/blueprints
-    chown -Rf authentik:authentik /opt/authentik-data
-    
+    chown -Rf authentik:authentik /opt/authentik-data/blueprints
+
     if [[ $MAJOR == 2026 && $MINOR -lt 8 ]]; then
 	    msg_info "Updating Worker and Server config (from $MAJOR.$MINOR)"
       cat <<EOF >>/etc/default/authentik-server
@@ -228,7 +228,7 @@ $STD pct exec "$CTID" -- bash -c "mkdir -p /opt/authentik-data/{certs,media,geoi
   cp /opt/authentik/tests/GeoLite2-City-Test.mmdb /opt/authentik-data/geoip/GeoLite2-City.mmdb; \
   cp -r /opt/authentik/blueprints /opt/authentik-data/; \
   rm -r /opt/authentik/blueprints; \
-  chown -Rf authentik:authentik /opt/authentik-data"
+  chown -Rf authentik:authentik /opt/authentik-data/blueprints"
 msg_ok "Attached data storage volume"
 
 msg_info "Starting Services"