netbird-proxy: named volume for /certs (ACME write perms) #63

Merged
k.renner merged 1 commits from netbird-proxy-certs-volume into master 2026-06-27 04:57:35 +00:00
1 Commits
Author SHA1 Message Date
k.rennerandClaude Opus 4.8 8f04f5a388 netbird-proxy: use a named volume for /certs so ACME can write
The proxy runs non-root; a root-owned bind mount (/opt/netbird-proxy/certs)
was unwritable ('open lock file ...: permission denied'), which would block
cert issuance once the host gets traffic. Switch to a named volume like
VPS-1, which inherits the image's writable ownership.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-27 06:57:30 +02:00