A Dockerized publishing service for eternityproject.fi. It provides local accounts, password hashing, authenticated publishing, and owner-only post editing. Content is persisted to SQLite in a named Docker volume.

Run it

Copy .env.example to .env and replace SECRET_KEY with a long random string.
Build and start the service:

docker compose up --build -d

Open http://localhost:8000, create the first account, and publish a field note. The first request initializes the database automatically.

Accounts and MFA

The initial administrator account is admin with password admin, as requested for first-run access. Sign in, enroll MFA, and change this password before exposing the service to the internet. New registrations are held for approval in Accounts; accepted users must enroll a TOTP authenticator before they can publish.

Production notes

Put this service behind a TLS reverse proxy for eternityproject.fi (for example Caddy or Nginx). Set a strong unique SECRET_KEY; the Compose file intentionally refuses to start without it. Back up the eternity_data Docker volume, which contains accounts and posts.