docmost: promote from _dev, use internal network, document APP_SECRET and proxy setup

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

docmost/compose.yaml

@@ -0,0 +1,47 @@
+services:
+  docmost:
+    image: ${DOCMOST_IMAGE:-docmost/docmost:latest}
+    restart: ${DOCMOST_RESTART:-unless-stopped}
+    volumes:
+      - ${VOL_PATH:-/data}/docmost/storage:/app/data/storage
+    environment:
+      - APP_URL=${APP_URL:-http://localhost:8000}
+      - APP_SECRET=${APP_SECRET:-ChangeThisPassword}
+      - DATABASE_URL=postgresql://docmost:${DB_PASSWORD:-ChangeThisPassword}@db:5432/docmost?schema=public
+      - REDIS_URL=redis://redis:6379
+    ports:
+      - "${DOCMOST_PORT:-8000}:3000"
+    networks:
+      - proxy
+      - internal
+    depends_on:
+      db:
+        condition: service_started
+      redis:
+        condition: service_started
+
+  db:
+    image: ${POSTGRES_IMAGE:-postgres:16-alpine}
+    restart: ${DOCMOST_RESTART:-unless-stopped}
+    volumes:
+      - ${VOL_PATH:-/data}/docmost/db:/var/lib/postgresql/data
+    environment:
+      - POSTGRES_DB=docmost
+      - POSTGRES_USER=docmost
+      - POSTGRES_PASSWORD=${DB_PASSWORD:-ChangeThisPassword}
+    networks:
+      - internal
+
+  redis:
+    image: ${REDIS_IMAGE:-redis:7-alpine}
+    restart: ${DOCMOST_RESTART:-unless-stopped}
+    volumes:
+      - ${VOL_PATH:-/data}/docmost/redis:/data
+    networks:
+      - internal
+
+networks:
+  proxy:
+    external: true
+  internal:
+    driver: bridge