Reset history to current sanitized state

.gitignore

@@ -12,3 +12,22 @@
 # Built Visual Studio Code Extensions
 *.vsix
 
+# Secrets and environment files
+.env
+.env.*
+!.env.example
+
+# Editor and OS artifacts
+*.swp
+.DS_Store
+
+# BEGIN reset-history environment exclusions
+.env
+.env.*
+*.env
+*.env.*
+!.env.example
+!.env.*.example
+!*.env.example
+!*.env.*.example
+# END reset-history environment exclusions

README.md

@@ -1,2 +1,26 @@
-# mealie
+# Mealie
+
+Self-hosted recipe manager with persistent application data and a PostgreSQL database.
+
+## Deployment layout
+
+- **Compose:** `/srv/docker/mealie/docker-compose.yml`
+- **Static configuration/source:** no additional static configuration or build source
+- **Non-secret environment:** registration policy, runtime UID/GID, timezone, public URL, PostgreSQL topology,
+and OpenAI model are declared inline in Compose; there is no project-local `.env`
+- **Secrets:** `/srv/docker/secrets/mealie/.env`
+- **NVMe application state:** `/srv/appdata/mealie/postgres`
+- **Bulk HDD data:** `/data/Data1/mealie`
+- **Other mounts:** none
+
+Secrets are never committed to this repository. The central secret environment
+is supplied to the Mealie and PostgreSQL services.
+
+## Dependencies and recovery
+
+- **Networks/dependencies:** Mealie depends on the healthy PostgreSQL service through the private
+`mealie_internal` network and uses the external `npm_proxy` network at `192.168.98.13`
+- **Back up:** `/srv/appdata/mealie/postgres`, `/data/Data1/mealie`, and the separately protected Mealie
+secret environment
+- **Re-creatable:** the Mealie and PostgreSQL containers; no persistent cache is declared
 

docker-compose.yml

@@ -0,0 +1,54 @@
+services:
+  mealie:
+    image: ghcr.io/mealie-recipes/mealie:latest
+    container_name: mealie
+    restart: unless-stopped
+#    ports:
+ #     - "9925:9000"
+    deploy:
+      resources:
+        limits:
+          memory: 1000M
+    volumes:
+      - /data/Data1/mealie:/app/data/
+    env_file:
+      - /srv/docker/secrets/mealie/.env
+    environment:
+      ALLOW_SIGNUP: "false"
+      PUID: 1000
+      PGID: 1000
+      TZ: America/Argentina/Buenos_Aires
+      BASE_URL: https://meals.yoonect.com
+      DB_ENGINE: postgres
+      POSTGRES_SERVER: mealie_postgres
+      POSTGRES_PORT: 5432
+      OPENAI_MODEL: gpt-4o
+    depends_on:
+      mealie_postgres:
+        condition: service_healthy
+    networks:
+      npm_proxy:
+        ipv4_address: 192.168.98.13
+      mealie_internal:
+
+  mealie_postgres:
+    container_name: mealie_postgres
+    image: postgres:15
+    restart: unless-stopped
+    volumes:
+      - /srv/appdata/mealie/postgres:/var/lib/postgresql/data
+    env_file:
+      - /srv/docker/secrets/mealie/.env
+    healthcheck:
+      test: ["CMD", "pg_isready"]
+      interval: 30s
+      timeout: 20s
+      retries: 3
+    networks:
+      - mealie_internal
+
+networks:
+  npm_proxy:
+    external: true
+  mealie_internal:
+    driver: bridge