From 4520f627baca6ada14005dfc2bb3d444abe57475 Mon Sep 17 00:00:00 2001
From: Jeroen Schweitzer <jpmschweitzer@gmail.com>
Date: Tue, 31 Mar 2026 09:28:54 +0200
Subject: [PATCH] ops(scheduler): add GCS credentials mount for offsite backups

Mount secrets directory and GCS_CREDENTIALS_FILE env var to support
the new gcs_backup_executor in scheduler v1.2.0.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 stacks/scheduler.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/stacks/scheduler.yml b/stacks/scheduler.yml
index fff8569..3025464 100644
--- a/stacks/scheduler.yml
+++ b/stacks/scheduler.yml
@@ -41,6 +41,7 @@ services:
       - DOCS_MIRROR_PATH=/docs-mirror
       - DOCS_CHECK_INTERVAL=21600
       - SCHEDULER_API_KEY=${SCHEDULER_API_KEY}
+      - GCS_CREDENTIALS_FILE=/secrets/gcs-sa-key.json
       - PYTHONPATH=/app
 
     volumes:
@@ -57,6 +58,8 @@ services:
       - /home/jpmschweitzer/.config/code-server:/data/code-server-config:ro
       # For config backups (write destination)
       - /mnt/media/backups/docker-configs:/backups/docker-configs
+      # GCS service account credentials
+      - /home/jpmschweitzer/docker-data/scheduler/secrets:/secrets:ro
 
     networks:
       - docker-dataplane