From b51a3b564fb4ad901e5783e2f9674200aff071d0 Mon Sep 17 00:00:00 2001
From: Raphael Westphal <westphal.raphael@gmail.com>
Date: Wed, 19 Aug 2026 15:04:54 +0200
Subject: [PATCH] fix: worker auth.json bind must use HOST path (docker.sock
 resolves bind sources on the host, not in the daemon container)

---
 docker-compose.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 3f429b3..d26020a 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -16,8 +16,9 @@ services:
       LVMH_CONTAINER_LVMH_URL: ws://lvmh:8686/agent/ws
       GITLAB_BASE_URL: https://git.westphal.fr
       # host path of the pi config, so spawned containers can bind auth.json
-      # daemon-internal path of the read-only dotfiles mount (see volumes)
-      LVMH_HOST_PI_AGENT_DIR: /pi-dotfiles
+      # docker.sock bind semantics: bind sources resolve on the HOST, so
+      # this must be the HOST path of the pi config (auth.json etc.).
+      LVMH_HOST_PI_AGENT_DIR: ${LVMH_PI_AGENT_DIR:-/home/alarm/.dotfiles/pi/agent}
       OPENAI_API_KEY: ${OPENAI_API_KEY:-}
       GEMINI_API_KEY: ${GEMINI_API_KEY:-}
       DEEPSEEK_KEY: ${DEEPSEEK_KEY:-}