konairius/homelab
10
0
Fork 0
Code Issues 9 Pull Requests 7 Packages Projects Releases 1 Wiki Activity

netbird-proxy: named volume for /certs (ACME write perms) #63

Merged
k.renner merged 1 commits from netbird-proxy-certs-volume into master 2026-06-27 04:57:35 +00:00
Conversation 0 Commits 1 Files Changed 1
+6 -1
k.renner commented 2026-06-27 04:57:30 +00:00
Owner
Copy Link
Copy Source

Root-owned bind mount /certs was unwritable by the non-root proxy. Use a named volume like VPS-1.

Root-owned bind mount /certs was unwritable by the non-root proxy. Use a named volume like VPS-1.
k.renner added 1 commit 2026-06-27 04:57:30 +00:00
netbird-proxy: use a named volume for /certs so ACME can write 8f04f5a388 
The proxy runs non-root; a root-owned bind mount (/opt/netbird-proxy/certs)
was unwritable ('open lock file ...: permission denied'), which would block
cert issuance once the host gets traffic. Switch to a named volume like
VPS-1, which inherits the image's writable ownership.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
k.renner merged commit 30727eadb0 into master 2026-06-27 04:57:35 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
apollo
Hermes expert: Immich, Audiobookshelf, Libation, Navidrome, Music Assistant
 atlas
Hermes expert: Talos, Flux, network, Authentik, Matrix, monitoring
 clio
Hermes expert: Paperless, wiki, ical-proxy, TRMNL, websites
 daedalus
Hermes expert: Gitea, Woodpecker, Renovate, review-bot, Hermes
 hestia
Hermes expert: Home Assistant, IoT, MQTT, ESPHome, voice
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
alert-monitor-bot claude-bot (Claude Bot) flux hermes-bot issue-fix-bot k.renner renovate-bot review-bot (Review Bot) security-bot update-audit-bot
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: konairius/homelab#63