new: usr: Add opportunity to use profile picture. #4

compose.yaml

@@ -17,7 +17,7 @@ services:
       POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
       POSTGRES_DB: ${POSTGRES_DB}
       MERCURE_URL: http://localhost/.well-known/mercure
-      MERCURE_PUBLIC_URL: https://${PUBLIC_HOSTNAME:-localhost}/.well-known/mercure
+      MERCURE_PUBLIC_URL: https://${APP_PUBLIC_HOSTNAME:-localhost}/.well-known/mercure
       MERCURE_JWT_SECRET: ${MERCURE_JWT_SECRET}
       MERCURE_JWT_TOKEN: ${MERCURE_JWT_TOKEN}
       MERCURE_SUBSCRIBER_JWT: ${MERCURE_SUBSCRIBER_JWT}
@@ -26,6 +26,10 @@ services:
       RECAPTCHA_SECRET_KEY: ${RECAPTCHA_SECRET_KEY}
       WEBAUTHN_RP_ID: ${WEBAUTHN_RP_ID:-localhost}
       WEBAUTHN_ORIGIN: ${WEBAUTHN_ORIGIN:-https://localhost}
+      MINIO_ROOT_USER: ${MINIO_ROOT_USER}
+      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
+      MINIO_ENDPOINT: http://minio:9000
+      MINIO_PUBLIC_URL: ${MINIO_PUBLIC_URL:-http://localhost:9000}
     volumes:
       - app_var:/app/var
       - caddy_data:/data
@@ -35,13 +39,44 @@ services:
         condition: service_healthy
       mail:
         condition: service_started
+  minio:
+    image: minio/minio:RELEASE.2025-09-07T16-13-09Z-cpuv1
+    restart: unless-stopped
+    command: server /data --console-address ":9001"
+    ports:
+      - "9000:9000"
+      - "9001:9001"
+    environment:
+      MINIO_ROOT_USER: ${MINIO_ROOT_USER}
+      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
+    volumes:
+      - minio_data:/data
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
+      start_period: 10s
+  minio_init:
+    image: minio/minio:RELEASE.2025-09-07T16-13-09Z-cpuv1
+    restart: "no"
+    depends_on:
+      minio:
+        condition: service_healthy
+    environment:
+      MINIO_ROOT_USER: ${MINIO_ROOT_USER}
+      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
+    volumes:
+      - ./docker/minio-init.sh:/minio-init.sh:ro
+    entrypoint: ["/bin/sh", "/minio-init.sh"]
   mail:
     image: boky/postfix:latest
     restart: unless-stopped
     environment:
       ALLOWED_SENDER_DOMAINS: ${MAIL_DOMAIN:-localhost}
-      # Optional: set a relay host if you need to forward to an external SMTP
-      # RELAYHOST: "[smtp.example.com]:587"
+      RELAYHOST: ${MAIL_RELAYHOST:-}
+      RELAYHOST_AUTH: ${MAIL_RELAYHOST_AUTH:-}
+      RELAYHOST_PASSWORD: ${MAIL_RELAYHOST_PASSWORD:-}
     volumes:
       - postfix_spool:/var/spool/postfix
   db:
@@ -67,3 +102,4 @@ volumes:
   caddy_data:
   caddy_config:
   postfix_spool:
+  minio_data: