2026-06-27 05:00:57 +00:00
1 changed files with 5 additions and 3 deletions
@@ -16,10 +16,11 @@ services:
    ports:
      - "443:443"
    volumes:
-      # Named volume (like VPS-1) — inherits the image's writable ownership so
-      # the non-root proxy can write ACME certs. A root-owned bind mount can't.
+      # Named volumes — they inherit the image's writable ownership, so the
+      # non-root proxy can write certs + netbird state. Root-owned bind mounts
+      # can't (permission denied on /certs and /var/lib/netbird).
      - netbird_proxy_certs:/certs
-      - /opt/netbird-proxy/state:/var/lib/netbird
+      - netbird_proxy_state:/var/lib/netbird
    logging:
      driver: "json-file"
      options:
@@ -28,3 +29,4 @@ services:

 volumes:
  netbird_proxy_certs:
+  netbird_proxy_state: