Normalize geowiki compose; sanitize .env.example

docker-compose.yml:
- Rename docker-compopse.yml -> docker-compose.yml (filename typo)
- IMAGE_VERSION env var for image tag
- Fix network declaration order (external: true before name:)

.env.example:
- Remove real DATABASE_PASSWORD
- Remove real LOCAL_ADMIN_PASSWORD and LOCAL_USER_PASSWORD; comment out
  local auth block (bypass-only, should not be set in production)
- Fix broken first line (missing #)
- Fix BACKUP_DATABASES_URLS typo -> BACKUP_DATABASE_URLS
- Add SECRET_KEY_BASE, IMAGE_VERSION, DATABASE_URL
- Use variable references in DATABASE_URL and BACKUP_DATABASE_URLS

Add .rsync-exclude

Made-with: Cursor

Author: romkey

apps/geowiki/.env.example

@@ -0,0 +1,39 @@
+# ── Image version ─────────────────────────────────────────────────────────────
+#IMAGE_VERSION=latest
+
+# ── Rails ─────────────────────────────────────────────────────────────────────
+RAILS_ENV=production
+PORT=3000
+
+# Generate with: openssl rand -hex 64
+SECRET_KEY_BASE=
+
+# Set to true to force HTTPS redirects (disable when behind SSL-terminating proxy)
+RAILS_FORCE_SSL=false
+# Set to true when running behind an SSL-terminating reverse proxy
+RAILS_ASSUME_SSL=false
+
+# ── Database (connects via postgres-net) ──────────────────────────────────────
+DATABASE_USER=geowiki_user
+DATABASE_PASSWORD=
+DATABASE_NAME=geowiki_db
+DATABASE_HOST=postgresql
+DATABASE_URL=postgresql://${DATABASE_USER}:${DATABASE_PASSWORD}@${DATABASE_HOST}:5432/${DATABASE_NAME}
+
+# Used by db-backup to back up this service's database
+BACKUP_DATABASE_URLS=postgresql://${DATABASE_USER}:${DATABASE_PASSWORD}@${DATABASE_HOST}:5432/${DATABASE_NAME}
+
+# ── Authentication - Authentik OAuth2 (optional) ──────────────────────────────
+#AUTHENTIK_CLIENT_ID=
+#AUTHENTIK_CLIENT_SECRET=
+#AUTHENTIK_SITE=https://auth.pdxhackerspace.org
+
+# ── Authentication - Local admin account (optional, bypasses OAuth) ────────────
+#LOCAL_ADMIN_EMAIL=admin@example.com
+#LOCAL_ADMIN_PASSWORD=
+#LOCAL_ADMIN_NAME=PDX Hackerspace Admin
+
+# ── Authentication - Local user account (optional, bypasses OAuth) ─────────────
+#LOCAL_USER_EMAIL=member@example.com
+#LOCAL_USER_PASSWORD=
+#LOCAL_USER_NAME=PDX Hackerspace Member

apps/geowiki/.rsync-exclude

@@ -0,0 +1,22 @@
+services:
+  geowiki:
+    image: ghcr.io/romkey/pdxhackerspace-geowiki:${IMAGE_VERSION:-latest}
+    container_name: geowiki
+    hostname: geowiki
+    restart: unless-stopped
+    volumes:
+      - ../../lib/geowiki:/app/storage
+      - ../../log/geowiki:/app/log
+    env_file:
+      - .env
+    networks:
+      - db
+      - proxy
+
+networks:
+  proxy:
+    external: true
+    name: nginx-proxy-net
+  db:
+    external: true
+    name: postgres-net