FROM feat/980-registry-vm-deploy TO development

[ryaneggz]

Summary

• Add a registry-only production Compose base for the GHCR API and worker images.
• Add an explicitly opt-in private dependency overlay for Postgres/pgvector, Redis, MinIO, SearXNG, and profile-gated Ollama.
• Add deploy/.example.env, secure SearXNG settings generation, an idempotent MinIO bucket initializer, and VM deployment documentation.

Deployment behavior

• Base mode starts only api and worker; dependencies remain externally managed.
• The database overlay is loaded only with both Compose files explicitly named.
• Ollama is not started unless --profile ollama is selected.
• API host exposure is loopback-only; dependency services publish no host ports.
• Existing .github/workflows/deploy-docker.yml, .github/workflows/deploy-vm.yml, and infra/docker-compose.yml are unchanged.

Validation

• Static Compose/YAML assertions: PASS (base service set, overlay/profile service set, no build directives, loopback API binding, private dependency ports, health/dependency conditions, tagged images).
• SearXNG settings template parse and production flags: PASS.
• Python syntax check: PASS.
• git diff --check: PASS.
• VM pull/start/health smoke test: not run from this sandbox; the deployment runbook contains the operator commands.
• pre-commit: unavailable in the current environment (pre-commit: command not found).

Reviewer evidence will be recorded at .oh/tasks/980-registry-vm-deploy/evidence.md after the focused PR audit.

Closes #980

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 0831f333-bfaf-4ac0-acc8-3544d4bc4841

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}