goclaw/docker-compose.claude-cli.yml at 6ea9b4d76216bd0a46592a6c8ae3d64d29232506 - goclaw - Gitea: Git with a cup of tea

tiennm99/goclaw

mirror of https://github.com/tiennm99/goclaw.git synced 2026-07-17 10:17:33 +00:00

Files

T

viettranx 1f72f0d179 fix(docker): harden credential sync and move CLI mount to overlay

- Replace chmod 644 temp file with install(1) -m 600 for atomic copy
  with correct ownership — eliminates world-readable window in /tmp
- Move ${HOME}/.claude volume mount from base docker-compose.yml to
  optional docker-compose.claude-cli.yml overlay — avoids breaking
  deployments where $HOME is unset (CI/CD, systemd, Swarm)

2026-03-25 08:21:11 +07:00

11 lines

363 B

YAML

Raw Blame History

 # Optional overlay: sync Claude CLI credentials from host into container.
 # Mounts host ~/.claude as read-only; entrypoint copies credentials to the data volume.
 #
 # Usage:
 #   docker compose -f docker-compose.yml -f docker-compose.postgres.yml -f docker-compose.claude-cli.yml up -d
 services:
   goclaw:
     volumes:
       - ${HOME}/.claude:/app/.claude-host:ro