diff --git a/apps/fail2ban-linuxserver/1.1.0/scripts/upgrade.sh b/apps/fail2ban-linuxserver/1.1.0/scripts/upgrade.sh
index 71fd851bd..e5658f096 100755
--- a/apps/fail2ban-linuxserver/1.1.0/scripts/upgrade.sh
+++ b/apps/fail2ban-linuxserver/1.1.0/scripts/upgrade.sh
@@ -1,4 +1,13 @@
 #!/usr/bin/env bash
 set -euo pipefail
-mkdir -p ./data/config
-chown -R 1000:1000 ./data 2>/dev/null || true
+
+paths=(
+  "${CONFIG_PATH:-./data/config}"
+)
+
+mkdir -p "${paths[@]}"
+for path in "${paths[@]}"; do
+  case "$path" in
+    ./*|../*) chown -R 1000:1000 "$path" 2>/dev/null || true ;;
+  esac
+done
diff --git a/apps/fail2ban-linuxserver/latest/scripts/upgrade.sh b/apps/fail2ban-linuxserver/latest/scripts/upgrade.sh
index 71fd851bd..e5658f096 100755
--- a/apps/fail2ban-linuxserver/latest/scripts/upgrade.sh
+++ b/apps/fail2ban-linuxserver/latest/scripts/upgrade.sh
@@ -1,4 +1,13 @@
 #!/usr/bin/env bash
 set -euo pipefail
-mkdir -p ./data/config
-chown -R 1000:1000 ./data 2>/dev/null || true
+
+paths=(
+  "${CONFIG_PATH:-./data/config}"
+)
+
+mkdir -p "${paths[@]}"
+for path in "${paths[@]}"; do
+  case "$path" in
+    ./*|../*) chown -R 1000:1000 "$path" 2>/dev/null || true ;;
+  esac
+done
diff --git a/apps/socket-proxy-linuxserver/3.4.0/scripts/init.sh b/apps/socket-proxy-linuxserver/3.4.0/scripts/init.sh
index 71fd851bd..79f1cf176 100755
--- a/apps/socket-proxy-linuxserver/3.4.0/scripts/init.sh
+++ b/apps/socket-proxy-linuxserver/3.4.0/scripts/init.sh
@@ -1,4 +1,4 @@
 #!/usr/bin/env bash
 set -euo pipefail
-mkdir -p ./data/config
-chown -R 1000:1000 ./data 2>/dev/null || true
+
+:
diff --git a/apps/socket-proxy-linuxserver/latest/scripts/init.sh b/apps/socket-proxy-linuxserver/latest/scripts/init.sh
index 71fd851bd..79f1cf176 100755
--- a/apps/socket-proxy-linuxserver/latest/scripts/init.sh
+++ b/apps/socket-proxy-linuxserver/latest/scripts/init.sh
@@ -1,4 +1,4 @@
 #!/usr/bin/env bash
 set -euo pipefail
-mkdir -p ./data/config
-chown -R 1000:1000 ./data 2>/dev/null || true
+
+: