Move the gateway to junior.gib: CI deploy, compose copy, renewal script, docs

scripts/renew-hosts.sh

@@ -8,7 +8,9 @@
 #   scripts/renew-hosts.sh "Mac mini"   renew one host by label
 set -euo pipefail
 
-GATEWAY_SSH="${GATEWAY_SSH:-server.gib}"
+GATEWAY_SSH="${GATEWAY_SSH:-junior.gib}"
+# The container runtime on the gateway host: podman on junior, docker on the home server.
+GATEWAY_RUNTIME="${GATEWAY_RUNTIME:-podman}"
 GATEWAY_CONTAINER="${GATEWAY_CONTAINER:-wristcode-gateway}"
 
 # label | SSH host, or "local" for the machine running this script | public T3 URL
@@ -46,7 +48,7 @@ renew() {
   fi
   # The credential travels on stdin, not on a command line other processes could read.
   ssh -o BatchMode=yes "$GATEWAY_SSH" \
-    "read -r credential && docker exec $GATEWAY_CONTAINER wristcode host add '$url' \"\$credential\" --label '$label'" \
+    "read -r credential && $GATEWAY_RUNTIME exec $GATEWAY_CONTAINER wristcode host add '$url' \"\$credential\" --label '$label'" \
     <<<"$credential"
 }
 
@@ -57,5 +59,5 @@ for entry in "${HOSTS[@]}"; do
   renew "$label" "$ssh_host" "$url" || failed=1
 done
 
-ssh -o BatchMode=yes "$GATEWAY_SSH" "docker exec $GATEWAY_CONTAINER wristcode host list" | cut -f1,4
+ssh -o BatchMode=yes "$GATEWAY_SSH" "$GATEWAY_RUNTIME exec $GATEWAY_CONTAINER wristcode host list" | cut -f1,4
 exit "$failed"