Make embed proxy ports configurable via env vars for multi-instance deployments

All 13 nginx embed proxy ports (8881-8895) are now driven by environment
variables instead of being hardcoded. This prevents port conflicts when
running multiple Changemaker instances on the same host.

Chain: .env → docker-compose port mappings → nginx container env →
entrypoint.sh envsubst → services.conf.template listen directives →
API /services/config endpoint → frontend buildServiceUrl().

Existing deployments are unaffected (all vars default to current values).

Bunker Admin

api/Dockerfile

@@ -30,8 +30,11 @@ COPY --from=build /app/dist ./dist
 COPY --from=build /app/package.json ./
 COPY --from=build /app/package-lock.json* ./
 COPY --from=build /app/prisma ./prisma
-# Install production-only deps and regenerate Prisma client
-RUN npm ci --omit=dev && npx prisma generate
+# Copy source files needed by prisma/seed.ts (imports ../src/config/env and ../src/utils/crypto)
+COPY --from=build /app/src ./src
+COPY --from=build /app/tsconfig.json ./
+# Install production-only deps, tsx (needed for prisma db seed), and regenerate Prisma client
+RUN npm ci --omit=dev && npm install tsx && npx prisma generate
 COPY --from=build /app/docker-entrypoint.sh /usr/local/bin/
 RUN chmod +x /usr/local/bin/docker-entrypoint.sh \
     && mkdir -p /app/uploads && chown -R node:node /app/uploads

api/docker-entrypoint.sh

@@ -27,8 +27,8 @@ npx prisma migrate deploy 2>&1
 echo "Migrations complete."
 
 echo "Running database seed..."
-npx prisma db seed 2>&1
-echo "Seed complete."
+npx prisma db seed 2>&1 || echo "WARNING: Seed failed (non-fatal — seed.ts may require source files not present in production image)"
+echo "Seed step done."
 
 # If running production mode (node dist/server.js) and dist is stale, recompile
 if [ -f "src/server.ts" ] && echo "$@" | grep -q "npm.*start\|node.*dist"; then

api/package.json

@@ -74,6 +74,6 @@
     "typescript": "^5.7.3"
   },
   "prisma": {
-    "seed": "tsx prisma/seed.ts"
+    "seed": "npx tsx prisma/seed.ts"
   }
 }

api/prisma/migrations/20260322100000_add_registry_settings/migration.sql

@@ -0,0 +1,3 @@
+-- AlterTable
+ALTER TABLE "site_settings" ADD COLUMN     "gitea_registry_url" TEXT NOT NULL DEFAULT 'gitea.bnkops.com/admin',
+ADD COLUMN     "use_registry_for_upgrade" BOOLEAN NOT NULL DEFAULT false;