81d4ec2c97
The volume mount /app/dataprotection-keys was created under root:root permissions on the host. When the container restarted with the 1.15.0 image, the non-root app user (uid=1654) could no longer read/write DataProtection keys, causing every request to fail with UnauthorizedAccessException and fall back to the generic /Error page. Add RUN chown during the final Docker stage so the directory ownership matches the runtime user before USER $APP_UID takes effect.