From 1b069c6682b23957d81fdf5771c09c459a50c5f4 Mon Sep 17 00:00:00 2001
From: EugeneTes <meelstorm@gmail.com>
Date: Wed, 26 Aug 2026 07:08:56 +0000
Subject: [PATCH] Add volcanic-agents token user

Second entry in authorization.users with token auth, no permissions
block (so full admin). Token is supplied via NATS_VOLCANIC_AGENTS_TOKEN
Coolify env var and substituted into the inline config at compose parse
time. Local credentials.local.json (gitignored) holds the connection
details for both users.
---
 .gitignore         | 1 +
 docker-compose.yml | 3 ++-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/.gitignore b/.gitignore
index 9d6e4b6..0f4f92c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1,5 @@
 deploy.json
+credentials.local.json
 
 # .NET build output (for examples/csharp)
 bin/
diff --git a/docker-compose.yml b/docker-compose.yml
index 93bf622..e80a5b5 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -39,7 +39,8 @@ configs:
 
       authorization {
         users = [
-          { user: "${NATS_USER}", password: "${NATS_PASSWORD}" }
+          { user: "${NATS_USER}", password: "${NATS_PASSWORD}" },
+          { user: "volcanic-agents", token: "${NATS_VOLCANIC_AGENTS_TOKEN}" }
         ]
       }