From b739533ce12fa15fdcc74ff060dcaa5fd64f294d Mon Sep 17 00:00:00 2001
From: Mitchell R <root@mitchellr.info>
Date: Wed, 27 May 2026 02:53:36 +0200
Subject: [PATCH] fix: mount betterframe-data volume on server container

secret.key, firmware signing keys, and all encrypted data require
persistent storage at /var/lib/betterframe. Without this volume,
every redeploy regenerates keys and breaks all encrypted fields.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 docker-compose.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docker-compose.yml b/docker-compose.yml
index 4196a3f..fe99740 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -38,6 +38,7 @@ services:
         source: ${SERVER_SEC_CONFIG:-./sec-config.yaml}
         target: /home/bsb/sec-config.yaml
         read_only: true
+      - betterframe-data:/var/lib/betterframe
     expose:
       - "18080"
       - "18081"