podman wip

docs/podman.md

@@ -0,0 +1,44 @@
+# Podman Staging Environment
+
+The Podman stack mirrors `scripts/local_env.sh` using long-lived containers. Every boot spins up a fresh Base Sepolia fork, redeploys contracts, seeds liquidity, and launches the live-reload services behind Caddy on port 80.
+
+## Service Topology
+- `anvil` – Base Sepolia fork with optional mnemonic from `onchain/.secret.local`
+- `bootstrap` – one-shot job running `DeployLocal.sol`, seeding liquidity, priming blocks, and writing shared env files
+- `ponder` – `npm run dev` for the indexer (port 42069 inside the pod)
+- `frontend` – Vite dev server for `web-app` (port 5173 inside the pod)
+- `txn-bot` – automation loop plus Express status API (port 43069 inside the pod)
+- `caddy` – front door at `http://<host>:80`, routing `/graphql`, `/health`, `/rpc/anvil`, and `/txn` to the internal services
+
+All containers mount the repository so code edits hot-reload exactly as the local script. Named volumes keep `node_modules` caches between restarts.
+
+## Prerequisites
+- Podman 4.x (rootless recommended)
+- `podman-compose`
+
+## Launching
+```bash
+podman-compose -f podman-compose.yml build
+podman-compose -f podman-compose.yml up
+```
+- First run takes several minutes while Foundry installs deps, deploys contracts, and runs the seeding transactions.
+- Use `podman-compose down` to stop. Bring-up always redeploys and rewrites `services/ponder/.env.local` plus `tmp/podman/txnBot.env`.
+
+### Access Points (via Caddy)
+- Frontend: `http://<host>/`
+- GraphQL: `http://<host>/graphql`
+- RPC passthrough: `http://<host>/rpc/anvil`
+- Txn bot status: `http://<host>/txn/status`
+
+## Configuration Knobs
+Set environment variables before `podman-compose up`:
+- `FORK_URL` – Anvil upstream RPC (defaults to `https://sepolia.base.org`)
+- `DEPLOYER_PK`, `DEPLOYER_ADDR` – override deployer wallet; otherwise derived from `.secret.local` or Foundry defaults
+- `TXNBOT_PRIVATE_KEY`, `TXNBOT_ADDRESS`, `TXNBOT_FUND_VALUE` – customise bot signer and funding
+
+Edit `containers/Caddyfile` if you need different routes or ports.
+
+## Known Limitations
+- State is ephemeral; every restart wipes the fork and redeploys contracts.
+- Processes run in dev/watch mode (`npm run dev`), so staging traffic is not production hardened.
+- Secrets live in env files inside the repo mount because no external secret store is wired in.