diff --git a/scripts/config/application/application_missing_variables.sh b/scripts/config/application/application_missing_variables.sh
index e5598ac..b69779a 100755
--- a/scripts/config/application/application_missing_variables.sh
+++ b/scripts/config/application/application_missing_variables.sh
@@ -9,7 +9,12 @@ checkApplicationsConfigFilesMissingVariables()
         app=$(basename "$live" .config)
         remote="$install_containers_dir$app/$app.config"
         reconcileConfigFile "$live" "$remote"
-    done < <(runFileOp find "$containers_dir" -maxdepth 2 -type f -name '*.config' ! -name '*.bak')
+    # 2>/dev/null on the find: app data dirs (e.g. invidious/postgresdata,
+    # nextcloud/html) are owned by container sub-UIDs that the manager user
+    # can't read into, and they're harmless permission-denied chatter — find
+    # at this maxdepth doesn't need to enter them to satisfy -name '*.config'
+    # at depth 2. Keep the noise out of CLI/log output.
+    done < <(runFileOp find "$containers_dir" -maxdepth 2 -type f -name '*.config' ! -name '*.bak' 2>/dev/null)
 
     isSuccessful "Application config reconciliation completed."
 }