Use visible NAS upload storage and reconcile missing files

scripts/configure-nas.sh

@@ -61,7 +61,7 @@ if [ ! -f .env ]; then
   hop_session_secret=$(openssl rand -hex 32)
   hop_discovery_secret=$(openssl rand -hex 32)
   hop_env_tmp=$(mktemp .env.nas.XXXXXX)
-  awk '!/^(HOP_BIND_IP|HOP_HOST_PORT|HOP_CONTAINER_PORT|APP_URL|SESSION_SECRET|DISCOVERY_SECRET|RESEND_API_KEY|REGISTRATION_MODE)=/' .env.example > "$hop_env_tmp"
+  awk '!/^(HOP_BIND_IP|HOP_HOST_PORT|HOP_CONTAINER_PORT|HOP_RUN_UID|HOP_RUN_GID|APP_URL|SESSION_SECRET|DISCOVERY_SECRET|RESEND_API_KEY|REGISTRATION_MODE)=/' .env.example > "$hop_env_tmp"
   {
     printf 'HOP_BIND_IP=%s\n' "$hop_nas_ip"
     printf 'HOP_HOST_PORT=50189\nHOP_CONTAINER_PORT=50189\n'
@@ -78,6 +78,24 @@ else
   printf '%s\n' '기존 .env를 유지합니다. 비밀값을 다시 생성하지 않습니다.'
 fi
 
+# Match the NAS user so owner-only uploaded files remain readable in the NAS file manager.
+hop_run_uid=${SUDO_UID:-$(id -u)}
+hop_run_gid=${SUDO_GID:-$(id -g)}
+if [ "$hop_run_uid" = 0 ]; then
+  printf '%s\n' 'NAS의 일반 사용자로 로그인한 뒤 sudo sh scripts/configure-nas.sh로 실행하세요.' >&2
+  exit 1
+fi
+for hop_identity_key in HOP_RUN_UID HOP_RUN_GID; do
+  if ! grep -Eq "^${hop_identity_key}=[0-9]+$" .env; then
+    hop_env_tmp=$(mktemp .env.nas.XXXXXX)
+    awk -v key="$hop_identity_key" 'index($0,key "=") != 1' .env > "$hop_env_tmp"
+    case "$hop_identity_key" in HOP_RUN_UID) hop_identity_value=$hop_run_uid ;; HOP_RUN_GID) hop_identity_value=$hop_run_gid ;; esac
+    printf '%s=%s\n' "$hop_identity_key" "$hop_identity_value" >> "$hop_env_tmp"
+    mv "$hop_env_tmp" .env
+    hop_env_tmp=''
+  fi
+done
+
 chmod 600 .env
 if grep -Eq '^USER_STORAGE_LIMIT_MB=10240$' .env; then
   hop_env_tmp=$(mktemp .env.nas.XXXXXX)
@@ -95,10 +113,15 @@ if ! grep -Eq '^PROXY_DIAGNOSTIC_TOKEN=.{32,}$' .env; then
   hop_env_tmp=''
   unset hop_diagnostic_token
 fi
+sh scripts/prepare-nas-storage.sh
 hop_yaml_tmp=$(mktemp .compose.nas.XXXXXX)
 docker compose --project-name hop --project-directory "$PWD" --env-file .env -f compose.yaml config --no-env-resolution > "$hop_yaml_tmp"
 mv "$hop_yaml_tmp" compose.nas.yaml
 hop_yaml_tmp=''
 chmod 600 compose.nas.yaml
+# sudo writes configuration as root; return it to the SSH user for Git/Docker app access.
+if [ "$(id -u)" = 0 ]; then
+  chown "$hop_run_uid:$hop_run_gid" .env compose.nas.yaml
+fi
 printf '\n%s\n' '완료. Docker 앱에서 프로젝트 이름 hop으로 아래 YAML을 불러오세요.'
 printf '%s/compose.nas.yaml\n' "$PWD"