drop_symlink unlinks as root (never follows the target) and refuses to start if the path is still a symlink. Immediately before nginx (which opens its logs under /home/$user/logs as root) starts, logs/, logs/nginx and logs/nodejs must be real directories and nothing under logs/ may be other than a regular file or directory, else the entrypoint exits 1. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>