diff --git a/services/filebrowser.sh b/services/filebrowser.sh
index 2362c74..28a8e34 100644
--- a/services/filebrowser.sh
+++ b/services/filebrowser.sh
@@ -352,6 +352,15 @@ FB_CONFIG
 
     chown -R "$ACTUAL_USER:$ACTUAL_USER" "$FB_DIR"
 
+    # The image runs as a fixed non-root user (adduser -u 1000 filebrowser in
+    # its Dockerfile, not root and not configurable via PUID/PGID), so the
+    # bind-mounted ./data — where it opens database.sqlite on every start —
+    # must actually be writable by UID 1000, not by $ACTUAL_USER from the
+    # broad chown above. Confirmed live: without this, the container fails
+    # every single start with "could not open database: ... permission
+    # denied" and restarts in a crash loop indefinitely.
+    chown -R 1000:1000 "$FB_DIR/data"
+
     # Deploy fbq-add-source.sh helper
     local _TOOLS_DIR
     _TOOLS_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../tools" 2>/dev/null && pwd)" || true
diff --git a/setup.sh b/setup.sh
index 020616c..879a3ef 100755
--- a/setup.sh
+++ b/setup.sh
@@ -390,11 +390,10 @@ while true; do
         # terminal can show (tput lines, falling back to a conservative 24
         # for a non-terminal/unknown size) so this can't request a dialog
         # taller than the screen.
-        local _term_lines _list_h _box_h
         _term_lines="$(tput lines 2>/dev/null </dev/tty || echo 24)"
         _list_h=${#SVCS[@]}
         [ "$_list_h" -gt 20 ] && _list_h=20
-        local _term_cap=$((_term_lines - 10))
+        _term_cap=$((_term_lines - 10))
         [ "$_term_cap" -lt 6 ] && _term_cap=6
         [ "$_list_h" -gt "$_term_cap" ] && _list_h="$_term_cap"
         _box_h=$((_list_h + 8))