add deploy

deploy/docker-compose.yaml

@@ -0,0 +1,32 @@
+# spacesh prod — front nginx proxies to the landing container and serves the DMG.
+# Deployed by .gitea/workflows/build.yaml (image + this file); the DMG is uploaded
+# separately via `make deploy-dmg` (Tauri can't cross-compile a macOS bundle in CI).
+services:
+  landing:
+    # LANDING_IMAGE is written to .env by the CI deploy job (exact registry path + tag).
+    image: ${LANDING_IMAGE:-git.realmanual.ru/spacesh/spacesh-landing:latest}
+    restart: unless-stopped
+    expose:
+      - "80"
+
+  proxy:
+    image: nginx:1.27-alpine
+    restart: unless-stopped
+    depends_on:
+      - landing
+    ports:
+      - "80:80"
+    volumes:
+      - ./proxy.conf:/etc/nginx/conf.d/default.conf:ro
+      - ./download:/srv/download:ro
+    networks:
+      spaceshell-network:
+      webproxy:
+        ipv4_address: 172.18.0.28
+  
+networks:
+  spaceshell-network:
+    driver: bridge
+  webproxy:
+    name: webproxy
+    external: true