diff --git a/Dockerfile b/Dockerfile
index d64da81..d53b455 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -28,7 +28,8 @@ COPY config.json ./
 COPY server ./server
 COPY --from=build /app/dist ./dist
 COPY docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh
-RUN chmod +x /usr/local/bin/docker-entrypoint.sh
+# 宿主机文件可能是 0700（如飞牛 NAS），服务以 PUID 运行，需要让 /app 对所有用户可读
+RUN chmod 755 /usr/local/bin/docker-entrypoint.sh && chmod -R a+rX /app
 
 EXPOSE 8066
 HEALTHCHECK --interval=60s --timeout=5s --start-period=10s CMD wget -qO- "http://127.0.0.1:${PORT}/api/health" >/dev/null || exit 1