Files
nvrl 7e1776bb04
Check and Windows preview / check (anvil) (push) Successful in 49s
Check and Windows preview / check (crucible) (push) Successful in 48s
Check and Windows preview / check (knurl) (push) Successful in 40s
Check and Windows preview / check (lathe) (push) Successful in 41s
Check and Windows preview / check (patina) (push) Successful in 56s
Check and Windows preview / check (rivet) (push) Successful in 45s
Check and Windows preview / check (temper) (push) Successful in 43s
Check and Windows preview / check (weld) (push) Successful in 1m20s
Check and Windows preview / previews (push) Successful in 1m15s
Check and Windows preview / windows (push) Successful in 2m31s
feat(website): add the fl.narl.io site
Astro site for the suite: a home page with the plugin cards, install
steps, principles, the metalwork names and the ideas on the bench, one
page per plugin, and the Impressum and privacy policy. Plugin names,
versions, download links and editor previews come from the catalog, the
wrapper manifests and docs/*/assets at build time.

Served by unprivileged nginx in Docker behind Traefik on fl.narl.io,
the same setup as proton.narl.io: no access logs, CSP 'self', no
JavaScript, legal pages filled from the environment at start.
2026-11-06 11:30:12 +01:00

28 lines
818 B
YAML

# Generic setup: the site on 127.0.0.1:8080. Put the reverse proxy (Traefik labels, networks)
# in a compose.override.yaml and drop the port mapping there if the proxy reaches the
# container over a Docker network. The build context is the repository root, because the
# site reads the plugin catalog, versions and screenshots from it.
services:
web:
build:
context: ..
dockerfile: website/Dockerfile
args:
SITE_URL: ${SITE_URL:-https://fl.narl.io}
image: bass-foundry-website:latest
env_file:
- path: .env
required: false
ports:
- "127.0.0.1:8080:8080"
restart: unless-stopped
cap_drop:
- ALL
security_opt:
- no-new-privileges:true
logging:
driver: json-file
options:
max-size: "1m"
max-file: "3"