homelab-codex-ws/hosts/piha/runtime/node-agent/docker-compose.override.yml

services:
  node-agent:
    environment:
      - NODE_NAME=piha
      - NODE_TYPE=sd_card
      - VPS_EVENTS_HOST=100.95.58.48
      - VPS_EVENTS_USER=oskar
      - VPS_EVENTS_PATH=/opt/homelab/events
      - CHECK_INTERVAL=60
    volumes:
      - /opt/homelab/agent-ssh:/home/homelab/.ssh:ro
    # Docker socket na PIHA: srw-rw---- root:123 (grupa "docker" = gid 123).
    # Agent biega jako uid 1000 (homelab) i domyślnie NIE jest w tej grupie →
    # PermissionError(13) przy /var/run/docker.sock → agent nie widzi kontenerów
    # (brak containers_not_running / healthcheck_failed / service_healthy).
    # group_add nadaje kontenerowi dodatkową grupę hosta. gid 123 jest specyficzny
    # dla PIHA — inne hosty mogą mieć inny gid grupy docker (patrz tech-debt uid/gid).
    group_add:
      - "123"
feat(node-agent): add runtime overrides for piha, solaria, chelsty-infra - piha: NODE_TYPE=sd_card (rate-limited docker prune, once per day) - solaria: NODE_TYPE=ai_node (dangling+containers+build cache; never -a to preserve Ollama images) - chelsty-infra: NODE_TYPE=lte_node (NO cleanup, events-only) - All three: VPS_EVENTS_HOST set for event shipping via rsync+SSH Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> 2026-05-27 13:34:23 +02:00			`services:`
			`node-agent:`
			`environment:`
			`- NODE_NAME=piha`
			`- NODE_TYPE=sd_card`
fix(node-agent): correct VPS_EVENTS_HOST to actual VPS Tailscale IP 100.108.208.3 is piha's Tailscale IP (piha hosts Forgejo+Redis). VPS's actual Tailscale IP is 100.95.58.48. All three node-agent overrides were pointing at piha itself, causing containers to SSH to their own host and fail auth. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> 2026-05-27 14:07:27 +02:00			`- VPS_EVENTS_HOST=100.95.58.48`
feat(node-agent): add runtime overrides for piha, solaria, chelsty-infra - piha: NODE_TYPE=sd_card (rate-limited docker prune, once per day) - solaria: NODE_TYPE=ai_node (dangling+containers+build cache; never -a to preserve Ollama images) - chelsty-infra: NODE_TYPE=lte_node (NO cleanup, events-only) - All three: VPS_EVENTS_HOST set for event shipping via rsync+SSH Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> 2026-05-27 13:34:23 +02:00			`- VPS_EVENTS_USER=oskar`
			`- VPS_EVENTS_PATH=/opt/homelab/events`
			`- CHECK_INTERVAL=60`
fix(node-agent): mount host SSH key into container for event shipping Nodes ship events to VPS via rsync+SSH. The container runs as root and uses the default SSH identity, which must be at /root/.ssh/. Mount /home/oskar/.ssh from the host read-only so the existing authorized key is available inside the container. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> 2026-05-27 13:59:28 +02:00			`volumes:`
fix(node-agent): PIHA agent uses dedicated /opt/homelab/agent-ssh (uid 1000) instead of oskar's .ssh (uid 1004) — fixes event shipping 2026-07-10 17:34:03 +02:00			`- /opt/homelab/agent-ssh:/home/homelab/.ssh:ro`
fix(node-agent): PIHA — group_add gid 123 (docker) so agent can read /var/run/docker.sock (was PermissionError, agent blind to containers) 2026-07-13 20:02:20 +02:00			`# Docker socket na PIHA: srw-rw---- root:123 (grupa "docker" = gid 123).`
			`# Agent biega jako uid 1000 (homelab) i domyślnie NIE jest w tej grupie →`
			`# PermissionError(13) przy /var/run/docker.sock → agent nie widzi kontenerów`
			`# (brak containers_not_running / healthcheck_failed / service_healthy).`
			`# group_add nadaje kontenerowi dodatkową grupę hosta. gid 123 jest specyficzny`
			`# dla PIHA — inne hosty mogą mieć inny gid grupy docker (patrz tech-debt uid/gid).`
			`group_add:`
			`- "123"`