fix: refuse to start when the cache directory is not writable

An unwritable cache directory degraded silently: media still served, because
the download succeeds before the cache write is attempted, so the only symptom
was one "permission denied" line per request and a cache that never filled.
Every request re-fetched from the CDN.

Probe the directory at startup and exit with the uid and the chown that fixes
it. The container image runs as uid 10000, which is the usual cause with a
bind-mounted cache, so say so in the message and in both compose examples.

1 files changed, 3 insertions, 1 deletions

diff --git a/compose.vpn_example.yml b/compose.vpn_example.yml
index 27cd488..a89262c 100644
--- a/compose.vpn_example.yml
+++ b/compose.vpn_example.yml
@@ -59,7 +59,9 @@ services:
       - no-new-privileges:true
     volumes:
       - ./config.json:/config.json:ro
-      - ./cache:/cache            # ensure this dir is owned 10000:10000
+      # The image runs as uid 10000, so the host cache dir must be writable by it:
+      #   mkdir -p cache && sudo chown -R 10000:10000 cache
+      - ./cache:/cache
     environment:
       # Empty by default = direct. Set SKUNKY_PROXY in .env to route via the VPN.
       - HTTPS_PROXY=${SKUNKY_PROXY:-}