PhilandClaude Opus 5.5
68a1622665
StarPunk's Gitea Actions workflow now builds and pushes the image on vX.Y.Z tags. Pin the tag in starpunk_version (v2.0.2, the first CI build) and always pull it, so an image built by hand on the server with the same name can't be deployed instead. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
40 lines
1.4 KiB
Django/Jinja
40 lines
1.4 KiB
Django/Jinja
services:
|
|
starpunk:
|
|
# Built and pushed by StarPunk's Gitea Actions workflow on vX.Y.Z tags
|
|
image: {{ subdomains.git }}/phil/starpunk:{{ starpunk_version }}
|
|
container_name: starpunk
|
|
restart: unless-stopped
|
|
extra_hosts:
|
|
- '{{ subdomains.pocketid }}:{{ docker.hairpin_ip }}'
|
|
- '{{ primary_domain }}:{{ docker.hairpin_ip }}'
|
|
volumes:
|
|
- starpunk-data:/data
|
|
environment:
|
|
# Site configuration
|
|
SITE_URL: https://{{ subdomains.starpunk }}
|
|
SITE_NAME: StarPunk
|
|
SITE_AUTHOR: Mr Whiskers
|
|
SITE_DESCRIPTION: Starpunk instance
|
|
# Site owner identity (h-card source, Micropub "me")
|
|
ADMIN_ME: https://{{ primary_domain }}
|
|
SESSION_SECRET: {{ vault_starpunk.session_secret }}
|
|
# Admin login via Pocket ID (client "StarPunk"); only this user may log in.
|
|
# StarPunk issues Micropub tokens itself (ADR-064).
|
|
OIDC_ISSUER: https://{{ subdomains.pocketid }}
|
|
OIDC_CLIENT_ID: {{ vault_starpunk.pocketid.client_id }}
|
|
OIDC_CLIENT_SECRET: {{ vault_starpunk.pocketid.client_secret }}
|
|
OIDC_ADMIN_SUB: {{ starpunk_admin_sub }}
|
|
OIDC_PROVIDER_NAME: Pocket ID
|
|
# Production settings
|
|
FLASK_ENV: production
|
|
FLASK_DEBUG: 0
|
|
LOG_LEVEL: INFO
|
|
DEV_MODE: false
|
|
volumes:
|
|
# Existing volume (starpunk_starpunk-data) holds the posts and database
|
|
starpunk-data:
|
|
networks:
|
|
default:
|
|
external: true
|
|
name: {{ docker.network_name }}
|