From fe575fa5243ae8d2adb71474c8309157fd948342 Mon Sep 17 00:00:00 2001
From: oskar <oskar@kapalla.org>
Date: Mon, 13 Jul 2026 20:02:20 +0200
Subject: [PATCH] =?UTF-8?q?fix(node-agent):=20PIHA=20=E2=80=94=20group=5Fa?=
 =?UTF-8?q?dd=20gid=20123=20(docker)=20so=20agent=20can=20read=20/var/run/?=
 =?UTF-8?q?docker.sock=20(was=20PermissionError,=20agent=20blind=20to=20co?=
 =?UTF-8?q?ntainers)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 hosts/piha/runtime/node-agent/docker-compose.override.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/hosts/piha/runtime/node-agent/docker-compose.override.yml b/hosts/piha/runtime/node-agent/docker-compose.override.yml
index 4d9ca41..2f260ca 100644
--- a/hosts/piha/runtime/node-agent/docker-compose.override.yml
+++ b/hosts/piha/runtime/node-agent/docker-compose.override.yml
@@ -9,3 +9,11 @@ services:
       - CHECK_INTERVAL=60
     volumes:
       - /opt/homelab/agent-ssh:/home/homelab/.ssh:ro
+    # Docker socket na PIHA: srw-rw---- root:123 (grupa "docker" = gid 123).
+    # Agent biega jako uid 1000 (homelab) i domyślnie NIE jest w tej grupie →
+    # PermissionError(13) przy /var/run/docker.sock → agent nie widzi kontenerów
+    # (brak containers_not_running / healthcheck_failed / service_healthy).
+    # group_add nadaje kontenerowi dodatkową grupę hosta. gid 123 jest specyficzny
+    # dla PIHA — inne hosty mogą mieć inny gid grupy docker (patrz tech-debt uid/gid).
+    group_add:
+      - "123"