migate envs to use yaml configs

deploy/docker-compose.prod.yml

@@ -44,30 +44,16 @@ services:
     image: atcr-appview:latest
     container_name: atcr-appview
     restart: unless-stopped
+    command: ["serve", "--config", "/config.yaml"]
+    # Base config: config-appview.example.yaml
+    # Env vars below override config file values for this deployment
     environment:
-      # Server configuration
-      ATCR_HTTP_ADDR: :5000
       ATCR_BASE_URL: https://${APPVIEW_DOMAIN:-atcr.io}
-
-      # Storage configuration (derived from HOLD_DOMAIN)
       ATCR_DEFAULT_HOLD_DID: ${ATCR_DEFAULT_HOLD_DID:-did:web:${HOLD_DOMAIN:-hold01.atcr.io}}
-
-      # Authentication
-      ATCR_AUTH_KEY_PATH: /var/lib/atcr/auth/private-key.pem
-      ATCR_AUTH_CERT_PATH: /var/lib/atcr/auth/private-key.crt
-
-      # UI configuration
-      ATCR_UI_DATABASE_PATH: /var/lib/atcr/ui.db
-
-      # Logging
       ATCR_LOG_LEVEL: ${ATCR_LOG_LEVEL:-info}
       ATCR_LOG_FORMATTER: ${ATCR_LOG_FORMATTER:-text}
-
-      # Jetstream configuration
-      JETSTREAM_URL: ${JETSTREAM_URL:-wss://jetstream2.us-west.bsky.network/subscribe}
-      ATCR_BACKFILL_ENABLED: ${ATCR_BACKFILL_ENABLED:-true}
-      ATCR_RELAY_ENDPOINT: ${ATCR_RELAY_ENDPOINT:-https://relay1.us-east.bsky.network}
     volumes:
+      - ./config-appview.yaml:/config.yaml:ro
       # Persistent data: auth keys, UI database, OAuth tokens, Jetstream cache
       - atcr-appview-data:/var/lib/atcr
     networks:
@@ -86,31 +72,22 @@ services:
     image: atcr-hold:latest
     container_name: atcr-hold
     restart: unless-stopped
+    command: ["serve", "--config", "/config.yaml"]
+    # Base config: config-hold.example.yaml
+    # Env vars below override config file values for this deployment
     environment:
-      HOLD_ADMIN_ENABLED: true
-      # Hold service configuration (derived from HOLD_DOMAIN)
       HOLD_PUBLIC_URL: ${HOLD_PUBLIC_URL:-https://${HOLD_DOMAIN:-hold01.atcr.io}}
-      HOLD_SERVER_ADDR: :8080
-      HOLD_ALLOW_ALL_CREW: ${HOLD_ALLOW_ALL_CREW:-false}
-      HOLD_PUBLIC: ${HOLD_PUBLIC:-false}
       HOLD_OWNER: ${HOLD_OWNER:-}
       HOLD_BLUESKY_POSTS_ENABLED: ${HOLD_BLUESKY_POSTS_ENABLED:-true}
-
-      # Embedded PDS configuration
-      HOLD_DATABASE_DIR: ${HOLD_DATABASE_DIR:-/var/lib/atcr-hold}
-      # HOLD_KEY_PATH: ${HOLD_KEY_PATH}  # Optional, defaults to {HOLD_DATABASE_DIR}/signing.key
-
-      # S3/UpCloud Object Storage configuration (REQUIRED)
+      # S3/UpCloud Object Storage (REQUIRED)
       AWS_ACCESS_KEY_ID: ${AWS_ACCESS_KEY_ID:-}
       AWS_SECRET_ACCESS_KEY: ${AWS_SECRET_ACCESS_KEY:-}
       AWS_REGION: ${AWS_REGION:-us-east-1}
       S3_BUCKET: ${S3_BUCKET:-atcr-blobs}
       S3_ENDPOINT: ${S3_ENDPOINT:-}
-
-      # Logging
-      ATCR_LOG_LEVEL: ${ATCR_LOG_LEVEL:-debug}
-      ATCR_LOG_FORMATTER: ${ATCR_LOG_FORMATTER:-text}
+      HOLD_LOG_LEVEL: ${ATCR_LOG_LEVEL:-info}
     volumes:
+      - ./config-hold.yaml:/config.yaml:ro
       # PDS data (carstore SQLite + signing keys)
       - atcr-hold-data:/var/lib/atcr-hold
       - ./quotas.yaml:/quotas.yaml:ro