Update start.sh

start.sh

@@ -1,30 +1,49 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
+
 : "${MYSQL_DATABASE:?Set MYSQL_DATABASE}"
 : "${MYSQL_USER:?Set MYSQL_USER}"
 : "${MYSQL_PASSWORD:?Set MYSQL_PASSWORD}"
 
+
 mkdir -p /run/mysqld
 chown -R mysql:mysql /run/mysqld
 
+
 if [ ! -d /var/lib/mysql/mysql ]; then
-  mariadb-install-db --user=mysql --datadir=/var/lib/mysql > /dev/null
+mariadb-install-db --user=mysql --datadir=/var/lib/mysql > /dev/null
 fi
 
+
 mysqld_safe --datadir=/var/lib/mysql --bind-address=127.0.0.1 &
 
+
 until mariadb-admin ping --silent > /dev/null 2>&1; do
-  sleep 1
+sleep 1
 done
 
+
 mariadb -uroot <<SQL
 CREATE DATABASE IF NOT EXISTS \`${MYSQL_DATABASE}\` CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci;
+
+
+-- Nextcloud connects via TCP to 127.0.0.1; in MariaDB, 'localhost' and '127.0.0.1' are different hosts.
+-- Grant to '%' (still safe here because the server binds only to 127.0.0.1) so local TCP connections work.
+CREATE USER IF NOT EXISTS '${MYSQL_USER}'@'%' IDENTIFIED BY '${MYSQL_PASSWORD}';
+GRANT ALL PRIVILEGES ON \`${MYSQL_DATABASE}\`.* TO '${MYSQL_USER}'@'%';
+
+
+-- Optional: keep an explicit localhost account as well
 CREATE USER IF NOT EXISTS '${MYSQL_USER}'@'localhost' IDENTIFIED BY '${MYSQL_PASSWORD}';
 GRANT ALL PRIVILEGES ON \`${MYSQL_DATABASE}\`.* TO '${MYSQL_USER}'@'localhost';
+
+
 FLUSH PRIVILEGES;
 SQL
 
+
 export MYSQL_HOST=127.0.0.1
 
-exec /entrypoint.sh "$@"
+
+exec /entrypoint.sh "$@"