From f14e0d0756fe0c74abb3b6a0bd9f1a0213c6d7b4 Mon Sep 17 00:00:00 2001
From: Ted Kim <ted.kim@konghq.com>
Date: Sun, 9 Aug 2026 17:22:02 -0400
Subject: [PATCH] chore(localmode): sync compose template with volcano-hosting

---
 internal/localmode/assets/docker-compose.template.yml | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/internal/localmode/assets/docker-compose.template.yml b/internal/localmode/assets/docker-compose.template.yml
index 6733bc6..369b51c 100644
--- a/internal/localmode/assets/docker-compose.template.yml
+++ b/internal/localmode/assets/docker-compose.template.yml
@@ -73,6 +73,12 @@ services:
         condition: service_healthy
       dynamodb:
         condition: service_started
+    # Mount docker socket to allow agent worker launch (local mode only).
+    # WARNING: This grants the server container permission to run any container
+    # with the server's privileges. Only safe in local development on your machine.
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - volcano-storage:/app/local-storage
     environment:
       # Core settings
       LOCAL_MODE: "true"
@@ -124,8 +130,6 @@ services:
       VOLCANO_FIRST_PARTY_DEVICE_CLIENT_ID: ${VOLCANO_FIRST_PARTY_DEVICE_CLIENT_ID:-}
       VOLCANO_FIRST_PARTY_AUTH_EMAIL: ${VOLCANO_FIRST_PARTY_AUTH_EMAIL:-}
       VOLCANO_FIRST_PARTY_AUTH_PASSWORD_HASH: ${VOLCANO_FIRST_PARTY_AUTH_PASSWORD_HASH:-}
-    volumes:
-      - volcano-storage:/app/local-storage
     ports:
       - "8000:8000"
       - "8002:8002"