Deploy

Static Hugo build served by nginx in one container (docker compose up -d --build). Hosting: an LXC on Proxmox, with Caddy in front terminating TLS and reverse-proxying fundbureau.xyz.

Provision

On the Proxmox node, with a free CTID and a free IP:

CTID=142 IP=10.0.0.51/24 GW=10.0.0.1 BRIDGE=vmbr0 STORAGE=local-lvm \
  REPO=https://github.com/<user>/fundbureau.git \
  ./provision-lxc.sh

Then:

Test it: curl -I http://10.0.0.51:8080
Point Caddy's upstream at the IP (deploy/Caddyfile), reload Caddy.
Open https://fundbureau.xyz, verify.

Update later

pct exec <CTID> -- bash -lc 'cd /opt/fundbureau && git pull && docker compose up -d --build'