chore(release): bump PG 18.6-trixie + pg_cron 1.6.7; rename prod compose; inline env

- Dockerfile.postgres: PG 18.6-trixie + pg_cron 1.6.7; POSTGRES_DB=openblog
  and cron.database_name=openblog baked into image (no compose required)
- docker-compose.yaml -> docker-compose.prod.yaml; all env vars inlined
  with REPLACE_ME placeholders for POSTGRES_PASSWORD and AUTH_SECRET
- .env.example marked local-dev-only
- install.sh, README, CONTRIBUTING, REQUIREMENTS, ROADMAP updated

Author: IamCoder18

.env.example

@@ -1,11 +1,14 @@
-# OpenBlog environment configuration
+# OpenBlog — local development environment configuration
 #
-# Compose reads this file (or `.env`) from the project root automatically.
-# The required vars are `AUTH_SECRET`, `POSTGRES_PASSWORD`, and `BASE_URL`. The optional vars
-# below cover port mapping, image pinning, and feature toggles.
+# ⚠️  PRODUCTION DEPLOYMENT DOES NOT USE THIS FILE. The prod compose
+#     (`docker-compose.prod.yaml`) has all env vars inlined — secrets and
+#     all. This file exists only for `pnpm dev`, vitest, prisma CLI,
+#     and any scripts that read `process.env` directly via dotenv.
 #
-# All other config (NODE_ENV, DATABASE_URL, etc.) is baked into the
-# compose files. You only need this file.
+# Required vars for local dev: `DATABASE_URL`, `AUTH_SECRET`.
+# `BASE_URL` and `PORT` are referenced by the dev server.
+#
+# Copy this file to `.env` and fill in the values to start.
 
 # ─── Required ─────────────────────────────────────────────────────────────────
 # BetterAuth signing secret. Generate with `openssl rand -base64 32`.

.github/workflows/publish.yml

@@ -331,7 +331,12 @@ jobs:
           file: ./Dockerfile.postgres
           platforms: linux/amd64,linux/arm64
           push: ${{ github.event_name != 'pull_request' }}
-          tags: ghcr.io/${{ steps.tags.outputs.repo_lc }}:postgres-16.14-pg-cron-1.6.7
+          # `:postgres` is a moving alias that always points at the most
+          # recent release's image — matches the default in docker-compose.prod.yaml.
+          # `postgres-18.6-pg-cron-1.6.7` is the immutable tag for this build.
+          tags: |
+            ghcr.io/${{ steps.tags.outputs.repo_lc }}:postgres
+            ghcr.io/${{ steps.tags.outputs.repo_lc }}:postgres-18.6-pg-cron-1.6.7
           provenance: mode=max
           sbom: true
           cache-from: type=gha,scope=postgres

CONTRIBUTING.md

@@ -30,7 +30,7 @@ Two compose files ship with the repo:
 
 | File                        | Purpose                                                                                    |
 | --------------------------- | ------------------------------------------------------------------------------------------ |
-| `docker-compose.yaml`       | **Production.** Pulls `ghcr.io/iamcoder18/openblog:latest`. No build step.                 |
+| `docker-compose.prod.yaml`  | **Production.** Pulls `ghcr.io/iamcoder18/openblog:latest`. Shipped via wget; NOT in this repo. |
 | `docker-compose.local.yaml` | **Dev.** Builds the image from the local `Dockerfile`. Use when iterating on the codebase. |
 
 For day-to-day local iteration:

Dockerfile.postgres

@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1.7
 
-ARG POSTGRES_VERSION=16.14-bookworm
+ARG POSTGRES_VERSION=18.6-trixie
 ARG PG_CRON_VERSION=1.6.7
 
 FROM postgres:${POSTGRES_VERSION} AS pg-cron-builder
@@ -9,7 +9,7 @@ ARG PG_CRON_VERSION
 ARG PG_CRON_SHA256=d950bc29155f31017567e23a31d268ff672e98276c0e9d062512fb7870351f03
 
 RUN apt-get update \
-    && apt-get install --yes --no-install-recommends ca-certificates curl gcc libc6-dev make postgresql-server-dev-16 \
+    && apt-get install --yes --no-install-recommends ca-certificates curl gcc libc6-dev make postgresql-server-dev-18 \
     && curl --fail --location --silent --show-error \
       "https://github.com/citusdata/pg_cron/archive/refs/tags/v${PG_CRON_VERSION}.tar.gz" \
       --output /tmp/pg_cron.tar.gz \
@@ -23,13 +23,24 @@ FROM postgres:${POSTGRES_VERSION}
 
 ARG PG_CRON_VERSION
 
+# Bake the database name into the image. The Postgres entrypoint script
+# reads $POSTGRES_DB and creates that database on first boot, so bare
+# `docker run` users get an `openblog` DB automatically. This is paired
+# with `cron.database_name=openblog` in the CMD below — both are required
+# for pg_cron to allow `CREATE EXTENSION pg_cron` from the right DB.
+ENV POSTGRES_DB=openblog
+
 LABEL org.opencontainers.image.title="OpenBlog PostgreSQL" \
       org.opencontainers.image.description="PostgreSQL with pg_cron for OpenBlog scheduled publishing" \
       org.opencontainers.image.source="https://github.com/IamCoder18/OpenBlog" \
       org.opencontainers.image.licenses="MIT" \
       org.opencontainers.image.version="${PG_CRON_VERSION}"
 
-COPY --from=pg-cron-builder /opt/pg_cron/usr/lib/postgresql/16/lib/pg_cron.so /usr/lib/postgresql/16/lib/pg_cron.so
-COPY --from=pg-cron-builder /opt/pg_cron/usr/share/postgresql/16/extension/ /usr/share/postgresql/16/extension/
+COPY --from=pg-cron-builder /opt/pg_cron/usr/lib/postgresql/18/lib/pg_cron.so /usr/lib/postgresql/18/lib/pg_cron.so
+COPY --from=pg-cron-builder /opt/pg_cron/usr/share/postgresql/18/extension/ /usr/share/postgresql/18/extension/
 
-CMD ["postgres", "-c", "shared_preload_libraries=pg_cron", "-c", "cron.use_background_workers=on"]
+# `cron.database_name` is locked to `openblog`. To use a different name,
+# fork the image and rebuild — `CREATE EXTENSION pg_cron` will otherwise
+# refuse to run from any other database. Compose files must NOT override
+# this with a different value.
+CMD ["postgres", "-c", "shared_preload_libraries=pg_cron", "-c", "cron.database_name=openblog", "-c", "cron.use_background_workers=on"]

README.md

@@ -45,7 +45,7 @@ curl -fsSL https://raw.githubusercontent.com/IamCoder18/OpenBlog/main/scripts/in
 
 The installer:
 
-1. Downloads `docker-compose.yaml` into the current directory.
+1. Downloads `docker-compose.prod.yaml` into the current directory.
 2. Prompts for `BASE_URL`, `BLOG_NAME`, and admin credentials.
 3. Pulls the published image from `ghcr.io/iamcoder18/openblog:latest`.
 4. Brings up Postgres + the app, waits for healthy, runs migrations.
@@ -295,7 +295,7 @@ The compose file passes both forms automatically, so **you only ever set `BASE_U
 | `NEXT_PUBLIC_BLOG_NAME` | `OpenBlog`      | Same, inlined for the client.                                                                          |
 | `SIGN_UP_ENABLED`       | `false`         | When `true`, `/auth/signup` is open to the public. Off by default — create users via the admin script. |
 | `DISABLE_RATE_LIMITING` | `false`         | Disables BetterAuth rate limiting. Used by E2E tests; do not enable in production.                     |
-| `DATABASE_URL`          | compose default | Postgres connection string. Hardcoded in `docker-compose.yaml`; override per environment.              |
+| `DATABASE_URL`          | compose default | Postgres connection string. Hardcoded in `docker-compose.prod.yaml`; per-deployment values are baked in by the installer. |
 | `PORT`                  | `3000`          | Port the Next.js standalone server listens on inside the container.                                    |
 | `NODE_ENV`              | `production`    | Set to `development` only when running `pnpm dev` outside Docker.                                      |
 
@@ -666,7 +666,7 @@ openblog/
 │   └── api.md               # Full HTTP API reference
 ├── sessions/                # Agent session notes (audit trail)
 ├── Dockerfile               # Three-stage build (fetcher → builder → runner). Builds with zero required args.
-├── docker-compose.yaml      # Production compose: pulls published image from ghcr.io.
+├── docker-compose.prod.yaml # Production compose: pulls published image from ghcr.io. Ships via wget, not the repo.
 ├── docker-compose.local.yaml# Dev compose: builds from local Dockerfile.
 └── docker-compose.test.yaml # Test-only Postgres
 ```

REQUIREMENTS.md

@@ -65,7 +65,7 @@ The database must support the following core relations:
 
 - The platform must be fully self-hostable, providing users with total ownership over their data and infrastructure.
 - The platform should be built with the latest version of Next.js.
-- **Docker Compose:** This is the primary and recommended deployment method. The repository must include a production-ready `docker-compose.yaml` that orchestrates the app and the Postgres database.
+- **Docker Compose:** This is the primary and recommended deployment method. The project must ship a production-ready `docker-compose.prod.yaml` (deployed via wget, outside the repo) that orchestrates the app and the Postgres database.
 
 ### 5.2 Dynamic Configuration
 

ROADMAP.md

@@ -90,7 +90,7 @@ This roadmap defines the logical progression from infrastructure to deployment f
 **Duration:** Production Readiness  
 **Focus:** Containerization, CI/CD, and self-hosting support
 
-- Create production-ready docker-compose.yaml
+- Create production-ready docker-compose.prod.yaml (shipped via wget, not the repo)
 - Configure multi-stage Docker builds
 - Set up environment variable documentation
 - Implement health checks and logging

docker-compose.local.yaml

@@ -1,14 +1,22 @@
 # ─────────────────────────────────────────────────────────────────────────────
 # OpenBlog — local source build compose (developer workflow)
 # ─────────────────────────────────────────────────────────────────────────────
-# Identical to docker-compose.yaml but builds the image from the local
+# Identical to docker-compose.prod.yaml but builds the image from the local
 # Dockerfile instead of pulling from a registry.
 #
 # Use this when you're hacking on the codebase:
 #   docker compose -f docker-compose.local.yaml up -d --build
 #
 # To customize baked-in defaults (NEXT_PUBLIC_BLOG_NAME, etc.), edit the
 # `ENV` block in Dockerfile before building.
+#
+# ⚠️  DATABASE NAME IS LOCKED TO `openblog` — DO NOT CHANGE ⚠️
+#
+# The Postgres service, the OpenBlog app, and the pg_cron extension all
+# hard-code the database name `openblog`. See docker-compose.prod.yaml for the
+# long-form explanation. In short: don't change POSTGRES_DB, the
+# cron.database_name flag, or the /openblog path in DATABASE_URL — pg_cron
+# and Prisma migrations won't follow.
 # ─────────────────────────────────────────────────────────────────────────────
 
 services:

docker-compose.prod.yaml

@@ -0,0 +1,114 @@
+# ─────────────────────────────────────────────────────────────────────────────
+# OpenBlog — production compose
+# ─────────────────────────────────────────────────────────────────────────────
+# Pulls published images from ghcr.io and runs the full stack. This file
+# is the artifact end users deploy — it is NOT pulled from this git repo;
+# users download it via wget (or have it generated locally by the installer).
+#
+# Direct deployment:
+#   1. wget https://raw.githubusercontent.com/IamCoder18/OpenBlog/main/docker-compose.prod.yaml
+#   2. Replace each `REPLACE_ME_…` placeholder below with a freshly generated
+#      secret:
+#        POSTGRES_PASSWORD  →  openssl rand -hex 32
+#        AUTH_SECRET        →  openssl rand -base64 32
+#      Or just run `./scripts/install.sh` to do the substitution automatically.
+#   3. Edit `BASE_URL` to your real deployment URL.
+#   4. docker compose up -d
+#
+# Image source:
+#   postgres  →  ghcr.io/iamcoder18/openblog:postgres
+#   app       →  ghcr.io/iamcoder18/openblog:latest
+# Pin to a version (e.g. :v0.1.0) for production by editing the `image:` lines.
+#
+# To build from source instead of pulling, use docker-compose.local.yaml.
+# ─────────────────────────────────────────────────────────────────────────────
+#
+# ⚠️  DATABASE NAME IS LOCKED TO `openblog` — DO NOT CHANGE ⚠️
+#
+# The Postgres service, the OpenBlog application, and the pg_cron extension
+# all hard-code the database name `openblog`. Changing any of the lines
+# below that reference it (POSTGRES_DB, cron.database_name, the /openblog
+# path in DATABASE_URL) will cause one or more of the following failures:
+#
+#   • `CREATE EXTENSION pg_cron` refuses with
+#       "can only create extension in database postgres"
+#     when connected to a differently-named database.
+#   • Scheduled-publish migrations (`cron.schedule` calls) target the
+#     wrong catalog and silently no-op.
+#   • First-time Prisma migrations target a DB that doesn't exist.
+#
+# If you genuinely need a different database name, fork the repo, edit
+# Dockerfile.postgres (POSTGRES_DB + cron.database_name CMD flag), edit
+# the same three lines in BOTH compose files, and rebuild — there is no
+# runtime override. This is intentional: it removes a class of subtle
+# bugs at the cost of flexibility.
+# ─────────────────────────────────────────────────────────────────────────────
+
+services:
+  postgres:
+    image: ghcr.io/iamcoder18/openblog:postgres
+    container_name: openblog-db
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: postgres
+      POSTGRES_PASSWORD: "REPLACE_ME_run_openssl_rand_hex_32"
+      POSTGRES_DB: openblog
+    command:
+      - postgres
+      - -c
+      - shared_preload_libraries=pg_cron
+      - -c
+      - cron.database_name=openblog
+      - -c
+      - cron.use_background_workers=on
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+    ports:
+      - "127.0.0.1:5432:5432"
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U postgres"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  app:
+    image: ghcr.io/iamcoder18/openblog:latest
+    container_name: openblog-app
+    restart: unless-stopped
+    init: true
+    depends_on:
+      postgres:
+        condition: service_healthy
+    ports:
+      - "3000:3000"
+    environment:
+      DATABASE_URL: "postgresql://postgres:REPLACE_ME_run_openssl_rand_hex_32@postgres:5432/openblog?schema=public"
+      BASE_URL: "http://localhost:3000"
+      BLOG_NAME: "OpenBlog"
+      BLOG_DESCRIPTION: ""
+      SITE_LOGO_URL: ""
+      SITE_CONTACT_EMAIL: ""
+      SITE_SOCIAL_URL: ""
+      NODE_ENV: production
+      PORT: 3000
+      AUTH_SECRET: "REPLACE_ME_run_openssl_rand_base64_32"
+      SIGN_UP_ENABLED: "false"
+      SMTP_HOST: ""
+      SMTP_PORT: ""
+      SMTP_SECURE: ""
+      SMTP_USER: ""
+      SMTP_PASSWORD: ""
+      SMTP_FROM: ""
+    healthcheck:
+      test:
+        [
+          "CMD-SHELL",
+          "wget -qO- http://127.0.0.1:3000/api/health >/dev/null || exit 1",
+        ]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 20s
+
+volumes:
+  postgres_data:

docker-compose.test.yaml

@@ -1,3 +1,16 @@
+# ─────────────────────────────────────────────────────────────────────────────
+# OpenBlog — test database (used by `pnpm run test:*`)
+# ─────────────────────────────────────────────────────────────────────────────
+# Brings up a throwaway Postgres instance for the test suite.
+#
+# ⚠️  EXCEPTION TO THE `openblog` LOCKDOWN: this compose uses
+#     `openblog_test` for the database name. This is INTENDED — the
+#     vitest integration tests, playwright e2e tests, and `scripts/test-*`
+#     shells all hard-code `openblog_test` so a developer can run them
+#     in parallel with a running dev database on `openblog` without
+#     colliding. Do not "normalize" this file's name to `openblog`.
+# ─────────────────────────────────────────────────────────────────────────────
+
 services:
   postgres-test:
     build: