Gateway container, compose file for server-gib, and Gitea CI with deploy

deploy/compose.yml

@@ -0,0 +1,27 @@
+# The gateway on server-gib, at ~/Server/Wristcode/compose.yml. Nginx Proxy Manager serves
+# wristcode.gbrown.org and forwards to wristcode-gateway:8080 over the nginx-bridge network.
+# CI deploys new images through ~/Server/ci-deploy.sh. Watchtower's nightly pull is the fallback.
+#
+# .env beside this file (mode 600) holds the APNs settings:
+#   APNS_KEY_ID=...        the key's ID from the Apple Developer portal
+#   APNS_TEAM_ID=GQJNM5YK2M
+#   APNS_KEY_PATH=/data/apns.p8   the .p8 file, placed in ./data
+name: wristcode
+
+networks:
+  nginx-bridge:
+    external: true
+
+services:
+  wristcode-gateway:
+    image: git.gbrown.org/gib/wristcode-gateway:latest
+    container_name: wristcode-gateway
+    hostname: wristcode-gateway
+    networks: ['nginx-bridge']
+    env_file: [.env]
+    environment:
+      - TZ=America/New_York
+    volumes:
+      - ./data:/data
+    labels: ['com.centurylinklabs.watchtower.enable=true']
+    restart: unless-stopped