From d9c71c00f56068a2d2fce0edec4479487f57914f Mon Sep 17 00:00:00 2001
From: Rasmus Wejlgaard <pez@pez.sh>
Date: Tue, 28 Apr 2026 20:51:13 +0100
Subject: [PATCH] add alloy to docker group

---
 ansible/roles/alloy/tasks/main.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/ansible/roles/alloy/tasks/main.yml b/ansible/roles/alloy/tasks/main.yml
index 00111ea..211cc5b 100644
--- a/ansible/roles/alloy/tasks/main.yml
+++ b/ansible/roles/alloy/tasks/main.yml
@@ -38,6 +38,16 @@
     - /var/db/alloy
   when: ansible_facts["os_family"] == "FreeBSD"
 
+# ── Docker socket access ─────────────────────────────────────────────────────
+
+- name: Add alloy to docker group
+  ansible.builtin.user:
+    name: alloy
+    groups: docker
+    append: true
+  when: "'docker_hosts' in group_names"
+  notify: "Restart alloy ({{ ansible_facts['os_family'] }})"
+
 # ── Config — all OS ───────────────────────────────────────────────────────────
 
 - name: Set alloy config path fact