Mainnet

compose.yaml

@@ -3,18 +3,25 @@ services:
     build:
       context: .
       target: runtime
+      args:
+        WIKIDECK_NETWORK: mainnet
+        WIKIDECK_GENESIS_TIME: "${WIKIDECK_GENESIS_TIME:-1798761600}"
     ports:
-      # Keep the prototype private; listen on all interfaces only inside the container.
-      - "127.0.0.1:${WIKIDECK_PORT:-3001}:3001"
+      # Loopback only; terminate reviewed HTTPS at the operator's edge.
+      - "127.0.0.1:${WIKIDECK_MAINNET_PORT:-3201}:3001"
     environment:
-      WIKIDECK_NETWORK: testnet
-      PUBLIC_ORIGIN: "${PUBLIC_ORIGIN:-http://127.0.0.1:${WIKIDECK_PORT:-3001}}"
-      WIKIDECK_PEERS: "${WIKIDECK_PEERS:-}"
-      WIKIDECK_ALLOW_PRIVATE_PEERS: "${WIKIDECK_ALLOW_PRIVATE_PEERS:-0}"
+      WIKIDECK_NETWORK: mainnet
+      WIKIDECK_GENESIS_TIME: "${WIKIDECK_GENESIS_TIME:-1798761600}"
+      PUBLIC_ORIGIN: "${WIKIDECK_MAINNET_ORIGIN:-}"
+      WIKIDECK_PEERS: "${WIKIDECK_MAINNET_PEERS:-}"
+      WIKIDECK_MAINNET_LAUNCH: "${WIKIDECK_MAINNET_LAUNCH:-}"
+      WIKIDECK_MAINNET_RISK_ACK: "${WIKIDECK_MAINNET_RISK_ACK:-}"
+      WIKIDECK_ALLOW_PRIVATE_PEERS: "0"
+      WIKIDECK_TRUSTED_PROXIES: "${WIKIDECK_TRUSTED_PROXIES:-}"
     volumes:
-      - wikideck-data:/app/data
+      - wikideck-mainnet-data:/app/data
     init: true
-    restart: unless-stopped
+    restart: "no"
     read_only: true
     tmpfs:
       - /tmp:size=32m,mode=1777,noexec,nosuid
@@ -28,4 +35,4 @@ services:
     stop_grace_period: 30s
 
 volumes:
-  wikideck-data:
+  wikideck-mainnet-data: