foundation

Shared infrastructure layer for the ponti-studios org. Single source of truth for PostgreSQL, Redis, compose stacks, and CI/CD — consumed as published artifacts by labs and hominem.

What's here

foundation/
├── catalog/              # Machine-readable image, service, and digest inventory
├── compose/              # Docker Compose stack (base, dev, test)
├── docs/                 # Local dev, deploy, release, and security docs
├── images/postgres/      # PostgreSQL 18 + pgvector + PostGIS + pgRouting
├── observability/        # Local OpenTelemetry Collector configuration
├── templates/            # Placeholder for future provider templates
├── .github/workflows/    # CI and image publishing
└── justfile              # Shared task runner

Quick start

# Start local infra (postgres + redis + minio + observability)
just up

# Verify services are healthy
just health

# Stop services
just down

# Validate compose config
just validate-compose

Images

Image	Registry	Description
PostgreSQL	ghcr.io/ponti-studios/foundation/postgres	PG 18 + pgvector 0.8.6 + PostGIS 3.6.4 + pgRouting

Consuming from labs or hominem

The canonical image reference lives in compose/ — use that as the source of truth. For production, pin the digest from the latest published build.

• Local development: docs/development.md

• Deployment: docs/deploy.md

• Releases: docs/releases.md

• Security: docs/security.md

Publishing the postgres image

Pushes to main automatically bump the patch version tag and publish the image. Use a manual dispatch only when you need a major or minor bump:

gh workflow run publish-postgres.yml -f version_part=minor

The workflow creates a canonical v* git tag in the repo and publishes the image to GHCR as the matching semver image tag without the v prefix. For deployment, prefer the digest-pinned reference above.