Add entrypoint.sh that authenticates with Infisical Machine Identity
and injects secrets as env vars before starting the Node.js app.
Replaces individual secret env vars in docker-compose.yml with
Infisical client credentials. Falls back gracefully if Infisical
is unavailable.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Infisical's SMTP client has its own TLS validation separate from
NODE_TLS_REJECT_UNAUTHORIZED. Mailcow uses a self-signed cert
which caused signup to fail with "self-signed certificate" error.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Single spaces.yml defines all community Postiz instances. generate.sh
reads it and produces per-space docker-compose files with correct
Traefik labels, redirect middleware, and networking. Infisical
deployment config added for secrets.jeffemmett.com.
Adding a new space is now a single block in spaces.yml + ./generate.sh.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Port mycro-zine (zine.mycofi.earth) to rsocials.online/zine as a community
content generation tool. Full 8-page zine creation pipeline with Gemini AI
for outlines and image generation, Sharp for print layout composition.
- 7 API routes under /api/zine/ (outline, generate-page, regenerate-page,
print-layout, save, generate-image, [id])
- 4-step creation wizard: topic → outline → page generation → print layout
- 5 visual styles, 4 tones, voice input, page refinement
- 300 DPI print-ready output (3300x2550px)
- Shareable zine viewer at /zine/z/[id] with OG metadata
- Docker: added zine-data volume, Sharp deps, env vars for API keys
- Also includes pre-existing Postiz URL updates (crypto-commons.org)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Jeff Emmett