From ab113d4174c3f96242a4773e1c9cd4cec56145ed Mon Sep 17 00:00:00 2001
From: Sam <samueljamesinc@gmail.com>
Date: Wed, 26 Aug 2026 15:33:21 -0400
Subject: [PATCH] =?UTF-8?q?deploy-homarr:=20rootless=20=E2=80=94=20drop=20?=
 =?UTF-8?q?become,=20reset=5Fconnection=20for=20docker=20group,=20all=20cr?=
 =?UTF-8?q?eds=20from=20Infisical?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 playbooks/deploy-homarr.yml | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/playbooks/deploy-homarr.yml b/playbooks/deploy-homarr.yml
index 545a8c9..bb98119 100644
--- a/playbooks/deploy-homarr.yml
+++ b/playbooks/deploy-homarr.yml
@@ -68,10 +68,9 @@
       ansible.builtin.debug:
         msg: "Homarr secret retrieved + valid. Proceeding to deploy."
 
-- name: "Deploy Homarr (as ansible user)"
+- name: "Deploy Homarr (rootless, as ansible user)"
   hosts: "{{ target | default('racknerd1') }}"
-  gather_facts: true
-  become: true
+  gather_facts: false
   vars:
     deploy_user: ansible
     homarr_dir: "/home/{{ deploy_user }}/docker/homarr"
@@ -83,7 +82,13 @@
     ansible_ssh_private_key_file: "/tmp/homarr_deploy_key"
     ansible_ssh_common_args: "-o StrictHostKeyChecking=accept-new -o IdentitiesOnly=yes"
   tasks:
-    - name: Docker available?
+    - name: Reset connection so docker group membership is active in this session
+      ansible.builtin.meta: reset_connection
+
+    - name: Gather facts (after connection reset)
+      ansible.builtin.setup:
+
+    - name: Docker available (rootless, via docker group)?
       ansible.builtin.command: docker version
       register: dv
       changed_when: false