Allow media-node container to use docker.sock via supplementary group.

deploy/node/install-unraid.sh

@@ -159,6 +159,16 @@ if [ -n "$SERIES" ]; then
 fi
 
 echo "Container starten (media-root=$MEDIA_ROOT)..."
+# docker.sock is often root:docker — give nobody that group so Admin→Herstart works.
+DOCKER_GID=""
+if [ -S /var/run/docker.sock ]; then
+  DOCKER_GID="$(stat -c '%g' /var/run/docker.sock 2>/dev/null || true)"
+fi
+GROUP_ARGS=()
+if [ -n "$DOCKER_GID" ] && [ "$DOCKER_GID" != "0" ]; then
+  GROUP_ARGS+=(--group-add "$DOCKER_GID")
+fi
+
 docker run -d \
   --name media-node \
   --restart unless-stopped \
@@ -174,6 +184,7 @@ docker run -d \
   -e "MEDIA_NODE_CONTAINER_NAME=media-node" \
   -e "TZ=${TZ:-Europe/Amsterdam}" \
   --user 99:100 \
+  "${GROUP_ARGS[@]}" \
   "${VOLUMES[@]}" \
   --entrypoint /usr/local/bin/media-node \
   alpine:3.20 \