Vibecoded CI/CD

docker-compose.yml

@@ -23,12 +23,22 @@ services:
 
   # The Lean editor (lean4web) — its own server, since it runs a real Lean
   # process per session and asks for a dedicated machine (see lean/).
+  # CI builds and pushes this image only when lean/** changes.
   lean:
-    build: ./lean
-    image: mathew-lean:latest
+    build:
+      context: ./lean
+      # To ship a ~4GB image that keeps Mathlib's cache in the volume below
+      # instead of inside itself (filled once at first start — see the
+      # "Keeping Mathlib out of the image" section of lean/README.md):
+      # args:
+      #   BAKE_MATHLIB: "false"
+    image: git.aranroig.com/syndria98/mathew-lean:latest
     ports:
       - "8080:8080"
     restart: always
+    # Only with BAKE_MATHLIB: "false" above:
+    # volumes:
+    #   - lean-mathlib:/opt/lean4web/Projects/MathlibDemo/.lake
 
   backend:
     image: git.aranroig.com/syndria98/mathew-backend:latest
@@ -44,3 +54,8 @@ services:
       # anyone could then forge sessions against the public site.
       JWT_SECRET: ${JWT_SECRET:-}
     restart: always
+
+# Only with the lean volume mode (uncomment together with the lean build arg
+# and the lean service's volumes entry):
+# volumes:
+#   lean-mathlib: