mysticalsoap/docker
Watch
1
0
Fork
You've already forked docker
 0
Code Issues 35 Pull requests 6 Wiki Activity Actions

docs: secret-file changes need a recreate; mergerfs passes inotify #380

Merged
mysticalsoap merged 1 commit from docs/secret-reload-mergerfs-inotify into trunk 2026-10-07 17:37:39 -04:00
Conversation 0 Commits 1 Files changed 2 +3 -1
mysticalsoap commented 2026-10-07 16:54:23 -04:00
Owner
Copy link

Problem

Two constraints met during #376 that nothing documented: a replaced secret file is not picked up by just up (compose tracks the path, not the content), and the mergerfs mount's inotify behaviour was undocumented, so the common "disable watchers on FUSE" advice looked applicable.

Fix

One sentence each on the page that owns the concern: Secrets.md § Pattern 1 (recreate after changing a value), Home-Server.md § mergerfs (inotify works for writers through the mount, only direct branch writes are invisible).

Verification

Both observed live on 2026-10-07: Authelia stayed on the old audiobookshelf client secret after just up infra and loaded the new one on just recreate authelia; a file created by the bookshelf-audio container through /data produced create and delete inotify events for a watcher on /srv/media/... and inside the audiobookshelf container.

🤖 Generated with Claude Code

## Problem Two constraints met during #376 that nothing documented: a replaced secret file is not picked up by `just up` (compose tracks the path, not the content), and the mergerfs mount's inotify behaviour was undocumented, so the common "disable watchers on FUSE" advice looked applicable. ## Fix One sentence each on the page that owns the concern: Secrets.md § Pattern 1 (recreate after changing a value), Home-Server.md § mergerfs (inotify works for writers through the mount, only direct branch writes are invisible). ## Verification Both observed live on 2026-10-07: Authelia stayed on the old `audiobookshelf` client secret after `just up infra` and loaded the new one on `just recreate authelia`; a file created by the `bookshelf-audio` container through `/data` produced create and delete inotify events for a watcher on `/srv/media/...` and inside the `audiobookshelf` container. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
docs: secret-file changes need a recreate; mergerfs passes inotify
All checks were successful
validate / validate (pull_request) Successful in 25s
Details
5ae26cf656
 
Both bit during the audiobook rollout: Authelia kept a replaced OIDC
client secret's old value through a `just up infra`, and the usual
"FUSE breaks watchers" advice turned out wrong for this mount because
every writer goes through it.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
mysticalsoap deleted branch docs/secret-reload-mergerfs-inotify 2026-10-07 17:37:39 -04:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
audit-work
Security enhancements coming out of an audit of the stack

  
bug
Something is broken

  
docs
Wiki, in-repo docs, comments

  
general-admin
Learning, refinement, and housekeeping

  
major-upgrade
Major-version bump, review carefully

  
needs-vps-sync

   
new-service
Adding a new service to the stack

  
on-hold
Deliberately parked, not ready to start

  
outside-work
Not part of the stack itself, tracked here anyway

  
post-podman
Suited to after the Podman migration

  
renovate
Opened by renovate-bot

  
upstream
Needs an issue or PR on someone else's project

  
vps
Work on the VPS rather than the homelab

No labels
audit-work
bug
docs
general-admin
major-upgrade
needs-vps-sync
new-service
on-hold
outside-work
post-podman
renovate
upstream
vps
Milestone
Clear milestone
No items
No milestone
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
mysticalsoap/docker!380
No description provided.