From 244bf3c6eb184bbc20d1daafb0c47bb44dd2151e Mon Sep 17 00:00:00 2001
From: Betty <betty.bombers@proyon.me>
Date: Wed, 25 Mar 2026 23:19:08 +0100
Subject: [PATCH] post: commit d3bbec7 in bojemoi

---
 .../commits/2026-03-25-commit-d3bbec7.md      | 43 +++++++++++++++++++
 1 file changed, 43 insertions(+)
 create mode 100644 content/posts/commits/2026-03-25-commit-d3bbec7.md

diff --git a/content/posts/commits/2026-03-25-commit-d3bbec7.md b/content/posts/commits/2026-03-25-commit-d3bbec7.md
new file mode 100644
index 0000000..3270fb6
--- /dev/null
+++ b/content/posts/commits/2026-03-25-commit-d3bbec7.md
@@ -0,0 +1,43 @@
+---
+title: "[bojemoi] fix(orchestrator): use docker-socket-proxy instead of direct socket"
+date: 2026-03-25T23:19:08+01:00
+draft: false
+tags: ["commit", "bojemoi", "main"]
+categories: ["Git Activity"]
+summary: "Commit d3bbec7 par Betty dans bojemoi"
+author: "Betty"
+---
+
+## Commit `d3bbec7`
+
+| | |
+|---|---|
+| **Repository** | bojemoi |
+| **Branch** | `main` |
+| **Author** | Betty |
+| **Hash** | `d3bbec7b84da8e313944c74b1f56efe8c9822820` |
+
+
+### Description
+
+- Remove /var/run/docker.sock bind mount from orchestrator service
+  (was failing with PermissionError since container now runs non-root)
+- Add DOCKER_SWARM_URL=tcp://docker-socket-proxy:2375 env var
+- Enable POST=1 DELETE=1 on boot/docker-socket-proxy (needed for
+  service create/delete via orchestrator API)
+- Fix config mode 0440→0444 so non-root appuser can read .env config
+
+Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
+
+### Files Changed
+
+```
+M	stack/01-service-hl.yml
+```
+
+### Diff Summary
+
+```
+ stack/01-service-hl.yml | 7 +++----
+ 1 file changed, 3 insertions(+), 4 deletions(-)
+```