chore(deploy): pull image from Gitea registry + manual buildx push flow

compose.yaml

@@ -1,43 +1,37 @@
-# Production stack for Dockge — builds the image on the host from this repo.
-# Dockge prefers compose.yaml, so this file is used instead of the dev
-# docker-compose.yml (which only runs Mailpit for local development).
+# Production stack for Dockge — pulls a pre-built image from the Gitea registry.
+# (Build + push the image first; see DEPLOY.md.)
 services:
   flashcard:
-    build:
-      context: .
-      dockerfile: Dockerfile
-    image: flashcard:local
+    image: 10.0.10.205:3000/bert.hausmans/flashcards:latest
     container_name: flashcard
-    restart: unless-stopped
-    # host:container — exposed on 4000 on the Dockge host, app listens on 3000 inside.
     ports:
-      - "4000:3000"
-    volumes:
-      - flashcard-data:/data
+      - 4000:4000
     environment:
-      NODE_ENV: production
-      PORT: "3000"
-      DB_PATH: /data/flashcard.db
+      - NODE_ENV=production
+      - PORT=4000
+      - DB_PATH=/app/data/flashcard.db
 
       # URL where users reach the app. Used in verification / reset / invite emails.
-      # CHANGE THIS to your real address, e.g. http://192.168.1.50:4000
-      # or https://flashcards.hausmans.cloud once behind a reverse proxy.
-      APP_URL: "http://CHANGE-ME:4000"
+      # CHANGE THIS to your real address, e.g. http://10.0.10.205:4000
+      - APP_URL=http://CHANGE-ME:4000
 
-      # Cookie security. Keep "false" when serving over plain HTTP — otherwise the
-      # browser drops the session cookie and login silently fails. Set to "true"
-      # only once the app is served over HTTPS (reverse proxy with TLS).
-      COOKIE_SECURE: "false"
-
-      # SMTP (Amazon SES). Leave SMTP_HOST empty to fall back to a stub mailer that
-      # prints verification/reset links to the container logs — handy for the very
-      # first sysadmin signup before SES is wired up.
-      SMTP_HOST: ""
-      SMTP_PORT: "587"
-      SMTP_SECURE: "false"
-      SMTP_USER: ""
-      SMTP_PASS: ""
-      SMTP_FROM: "Flashcard <noreply@hausmans.cloud>"
+      # Keep "false" over plain HTTP (otherwise the browser drops the login
+      # cookie). Set "true" only once behind an HTTPS reverse proxy.
+      - COOKIE_SECURE=false
 
+      # SMTP (Amazon SES). Leave SMTP_HOST empty to fall back to a stub mailer
+      # that prints verification/reset links to the container logs (handy for the
+      # first sysadmin signup before SES is wired up).
+      - SMTP_HOST=
+      - SMTP_PORT=587
+      - SMTP_SECURE=false
+      - SMTP_USER=
+      - SMTP_PASS=
+      - SMTP_FROM=Flashcard <noreply@hausmans.cloud>
+    volumes:
+      - flashcard-data:/app/data
+    restart: unless-stopped
 volumes:
   flashcard-data:
+    driver: local
+networks: {}