ci: publish container image to ghcr

.github/workflows/ci.yml

@@ -3,8 +3,12 @@ name: CI
 on:
   push:
     branches: [main, master]
+    tags: ["v*"]
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ubuntu-latest
@@ -32,3 +36,37 @@ jobs:
             sleep 1
           done
           scripts/curl-smoke.sh http://localhost:8080
+
+  publish:
+    runs-on: ubuntu-latest
+    needs: [test, docker]
+    if: github.event_name != 'pull_request'
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: docker/setup-buildx-action@v3
+      - uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - uses: docker/metadata-action@v5
+        id: meta
+        with:
+          images: ghcr.io/${{ github.repository }}
+          flavor: |
+            latest=false
+          tags: |
+            type=ref,event=branch
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+      - uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}

README.md

@@ -24,11 +24,18 @@ The full wire contract is in [docs/API.md](docs/API.md).
 ```sh
 docker run -d --name crosspoint-sync \
   -p 8080:8080 \
-  -v "$PWD/data:/data" \
-  ghcr.io/OWNER/crosspoint-sync:latest
+  -v crosspoint-data:/data \
+  ghcr.io/crosspoint-reader/crosspoint-sync:main
 ```
 
-Or from a checkout: `docker compose up -d` (see `docker-compose.yml`).
+Or from a checkout: `docker compose up -d` uses the published image from
+`docker-compose.yml`.
+
+For local image builds from the checkout, use:
+
+```sh
+docker compose -f docker-compose.dev.yml up -d --build
+```
 
 ### Railway (hosted-style deploy)
 

docker-compose.dev.yml

@@ -0,0 +1,14 @@
+services:
+  crosspoint-sync:
+    build: .
+    ports:
+      - "8080:8080"
+    volumes:
+      - crosspoint-data:/data
+    environment:
+      # Set to "true" on private instances once your accounts exist.
+      REGISTRATION_DISABLED: "false"
+    restart: unless-stopped
+
+volumes:
+  crosspoint-data:

docker-compose.yml

@@ -1,12 +1,14 @@
 services:
   crosspoint-sync:
-    build: .
-    # or, once published: image: ghcr.io/<org>/crosspoint-sync:latest
+    image: ghcr.io/crosspoint-reader/crosspoint-sync:main
     ports:
       - "8080:8080"
     volumes:
-      - ./data:/data
+      - crosspoint-data:/data
     environment:
       # Set to "true" on private instances once your accounts exist.
       REGISTRATION_DISABLED: "false"
     restart: unless-stopped
+
+volumes:
+  crosspoint-data: