v9.3.1

2026-08-31 22:17:18 +02:00
parent c6c25d26c3
commit 56170ccde9
19 changed files with 485 additions and 51 deletions
@@ -7,7 +7,15 @@ services:
      APP_MODE: agent
      AGENT_TOKEN: "replace-with-a-random-token-at-least-24-characters"
      HTTP_TIMEOUT_SECONDS: "10"
+      # Optional: set HOST_ROOT=/host and mount /:/host:ro for identity checks.
+      HOST_ROOT: ""
+      ALLOW_HOST_USER_MANAGEMENT: "false"
+      ALLOW_HOST_PERMISSION_MANAGEMENT: "false"
    volumes:
      - ./agent-data:/data
      - ./agent-stacks:/stacks
      - /var/run/docker.sock:/var/run/docker.sock
+      # For read-only host UID/GID + bind ownership checks:
+      # - /:/host:ro
+      # For explicit admin host-user creation only: use /:/host:rw and set
+      # ALLOW_HOST_USER_MANAGEMENT=true.