From 7937732fe56b67859e9048a96c0c8b3bcc488b69 Mon Sep 17 00:00:00 2001
From: lashman <lashman@robotbrush.com>
Date: Thu, 20 Aug 2026 12:34:00 +0300
Subject: [PATCH] add a compose file for the registry image

---
 docker-compose.yml | 51 ++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 51 insertions(+)
 create mode 100644 docker-compose.yml

diff --git a/docker-compose.yml b/docker-compose.yml
new file mode 100644
index 0000000..4568e57
--- /dev/null
+++ b/docker-compose.yml
@@ -0,0 +1,51 @@
+name: cruciverb
+
+services:
+  app:
+    image: git.lashman.live/lashman/cruciverb:latest
+    container_name: cruciverb
+    restart: unless-stopped
+    security_opt:
+      - no-new-privileges:true
+    deploy:
+      resources:
+        limits:
+          memory: 512M
+          cpus: '2.0'
+    healthcheck:
+      test: ["CMD-SHELL", "curl -sf http://localhost:8080/health || exit 1"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 30s
+    ports:
+      - "${PORT:-8484}:8080"
+    volumes:
+      - ./data:/app/data
+    environment:
+      PORT: 8080
+      DATA_DIR: /app/data
+      STATIC_DIR: /app/static
+      RUST_LOG: info
+
+      # where your instance lives - set this before first start
+      INSTANCE_URL: http://localhost:8484
+      CORS_ORIGIN: http://localhost:8484
+
+      # webauthn / passkeys
+      RP_ID: localhost
+      RP_ORIGIN: http://localhost:8484
+
+      # activitypub federation
+      AP_DOMAIN: localhost
+      AP_ACTOR_NAME: cruciverb
+
+      # admin - leave empty, use first-run setup via browser instead
+      ADMIN_PATH: /admin
+
+      # enable if you sit behind a trusted reverse proxy that sets x-forwarded-for
+      # TRUST_PROXY: "true"
+
+      # set to enable at-rest encryption of user data. make one with:
+      #   openssl rand -hex 32
+      # DATA_ENC_KEY: ""
\ No newline at end of file