From ae6c33c32b49868957f5543b755a7d700aabff52 Mon Sep 17 00:00:00 2001
From: Admin <1+admin@noreply.git.dcntrlized.org>
Date: Sun, 16 Aug 2026 15:54:39 +0100
Subject: [PATCH] fix: identity mounts must use the pki/services/<name> layout

---
 docker-compose.debug.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docker-compose.debug.yaml b/docker-compose.debug.yaml
index 3fe20eb..dd14d54 100644
--- a/docker-compose.debug.yaml
+++ b/docker-compose.debug.yaml
@@ -38,8 +38,8 @@ services:
       # fleet (devboot, DCNTRLIZED_DEV=true) at the shared-module default paths,
       # so the authproxy client authenticates to the mTLS auth hub.
       - ${DCNTRLIZED_DATA_DIR:-$HOME/.dcntrlized}/pki/ca.crt:/dcntrlized/pki/ca.crt:ro
-      - ${DCNTRLIZED_DATA_DIR:-$HOME/.dcntrlized}/pki/keepnote/tls.crt:/dcntrlized/pki/tls.crt:ro
-      - ${DCNTRLIZED_DATA_DIR:-$HOME/.dcntrlized}/pki/keepnote/tls.key:/dcntrlized/pki/tls.key:ro
+      - ${DCNTRLIZED_DATA_DIR:-$HOME/.dcntrlized}/pki/services/keepnote/tls.crt:/dcntrlized/pki/tls.crt:ro
+      - ${DCNTRLIZED_DATA_DIR:-$HOME/.dcntrlized}/pki/services/keepnote/tls.key:/dcntrlized/pki/tls.key:ro
 
     working_dir: /app/