git clone https://codeberg.org/rimu/pyfedi.git
cd pyfedi
git checkout v1.8.10

$ git fetch --depth 1 origin refs/tags/v1.8.10:refs/tags/v1.8.10
 * [new tag]         v1.8.10    -> v1.8.10
$ git show v1.8.10 --no-patch --format='%ci %s'
2026-10-31 12:00:01 +1300 v1.8.10

cp env.docker.sample .env.docker

SECRET_KEY='c0d5…（64位随机）'
SERVER_NAME='127.0.0.1:8129'

POSTGRES_USER='piefed'
POSTGRES_PASSWORD='q1w2e3r4'
POSTGRES_DB='piefed'

DATABASE_URL=postgresql+psycopg2://piefed:q1w2e3r4@db/piefed

CACHE_TYPE='RedisCache'
CACHE_REDIS_DB=1
CACHE_REDIS_URL='redis://redis:6379/0'
CELERY_BROKER_URL='redis://redis:6379/1'

ENABLE_ALPHA_API = 'true'

# 1) 显式项目名（多实例并存时防止 down 互删）
name: piefed-v1.8.10-stack

# 2) web 端口映射改为宿主 8129（官方默认 8030:5000）
  web:
    ports:
      - '8129:5000'

# 3) 实时通知端口（官方默认 8040:8000）
  piefednotifs:
    ports:
      - "8130:8000"

# 4) 自定义网络固定网段
networks:
  pf_network:
    name: piefed-v1.8.10-net
    external: false
    ipam:
      config:
        - subnet: 10.89.56.0/24

./docker-dirs.sh   # 创建 pgdata/ media/ logs/ tmp/

mkdir -p pgdata media logs tmp
chown -R 1000:1000 pgdata media logs tmp

$ ls -ld pgdata media logs tmp
drwxr-xr-x 2 yahui yahui 4096 Nov  2 16:06 logs
drwxr-xr-x 2 yahui yahui 4096 Nov  2 16:06 media
drwxr-xr-x 2 yahui yahui 4096 Nov  2 16:06 pgdata
drwxr-xr-x 2 yahui yahui 4096 Nov  2 16:06 tmp

docker compose pull db redis adminer
export DOCKER_BUILDKIT=1
docker compose build

 Image adminer Pulled

$ docker images | grep piefed
piefed-v1810-stack-celery:latest      1.06GB
piefed-v1810-stack-web:latest         1.06GB
piefed-v1810-stack-piefednotifs:latest 1.06GB

docker compose up -d

 Container piefed-v1810-stack-db-1 Started
 Container piefed-v1810-stack-redis-1 Started
 Container piefed-v1810-stack-adminer-1 Started
 Container piefed_celery1 Started
 Container piefed_notifs Started
 Container piefed_app1 Started

docker exec -it piefed_app1 sh
# 容器内：
export FLASK_APP=pyfedi.py
flask init-db

Added banned instance lemmychan.org
Manage banned instances at /admin/federation.
Added 'No-QAnon' blocklist, see https://github.com/rimu/no-qanon.
This can be reversed at /domains/banned using the 'unban all' button.
The admin user created here should be reserved for admin tasks and not used as a primary daily identity (unless this instance will only be for personal use).
Admin user name (ideally not 'admin'): admin
Admin email address: admin@piefed.test
Admin password: ********

$ docker compose ps
NAME                           IMAGE                             STATUS                    PORTS
piefed-v1810-stack-adminer-1   adminer                           Up                        127.0.0.1:8888->8080/tcp
piefed-v1810-stack-db-1        postgres:17                       Up                        5432/tcp
piefed-v1810-stack-redis-1     redis:6.2                         Up                        6379/tcp
piefed_app1                    piefed-v1810-stack-web            Up (healthy)              0.0.0.0:8129->5000/tcp
piefed_celery1                 piefed-v1810-stack-celery         Up (healthy)              5000/tcp
piefed_notifs                  piefed-v1810-stack-piefednotifs   Up (healthy)              0.0.0.0:8130->8000/tcp

$ curl -s http://127.0.0.1:8129/nodeinfo/2.0.json | head -c 260
{"openRegistrations":false,"protocols":["activitypub"],"software":{"name":"piefed","version":"1.8.10"},"usage":{"localComments":0,"localPosts":0,"users":{"activeHalfyear":1,"activeMonth":1,"total":1}},"version":"2.0"}

$ curl -sL -o /dev/null -w "root_final:%{http_code} url=%{url_effective}\n" http://127.0.0.1:8129/
root_final:200 url=http://127.0.0.1:8129/auth/login?next=/home

$ curl -s -X POST http://127.0.0.1:8129/api/alpha/user/login \
    -H 'Content-Type: application/json' -d '{"username":"admin","password":"q1w2e3r4"}'
{"jwt":"eyJhbGciOiJIUzI1NiIs...（232 字符）","code":200}

$ curl -s -X POST http://127.0.0.1:8129/api/alpha/community -H "Authorization: Bearer $TOKEN" \
    -H 'Content-Type: application/json' -d '{"name":"techops","title":"TechOps","description":"Self-hosting and ops topics"}'
{"community_view":{"community":{"actor_id":"https://127.0.0.1:8129/c/techops","id":1,"local":true,"name":"techops",...}}}

$ curl -s -X POST http://127.0.0.1:8129/api/alpha/post -H "Authorization: Bearer $TOKEN" \
    -H 'Content-Type: application/json' -d '{"title":"PieFed API 首帖","body":"通过 alpha API 发布的测试帖","community_id":1}'
{"post_view":{"community":{"actor_id":"https://127.0.0.1:8129/c/techops",...}}}

$ docker exec piefed-v1810-stack-db-1 psql -U piefed -d piefed -c "select name,post_count from community,post where post.community_id=community.id;"
  name   | post_count
---------+------------
 techops |          1

piefed_app1        0.03%  1.076GiB
piefed_celery1     0.02%  534MiB
piefed-v1810-stack-db-1     0.00%  132.1MiB
piefed_notifs      0.08%  45.87MiB
piefed-v1810-stack-redis-1  0.09%  3.633MiB
piefed-v1810-stack-adminer-1 0.00%  8.531MiB

# 手动：切 tag → 重新构建 → 滚动重启（迁移自动执行）
cd pyfedi
git fetch --tags && git checkout v1.8.10
export DOCKER_BUILDKIT=1
docker compose up -d --build

# 官方脚本（实测内容即三行：down → git pull → up -d --build）
./deploy-docker2.sh

#!/bin/bash
export DOCKER_BUILDKIT=1
docker compose down
git pull && docker compose up -d --build

5 2 * * * <USERNAME> docker exec piefed_app1 bash -c "cd /app && ./daily.sh"
*/1 * * * * <USERNAME> docker exec piefed_app1 bash -c "cd /app && ./send_queue.sh"
1 */6 * * * <USERNAME> docker exec piefed_app1 bash -c "cd /app && ./email_notifs.sh"
5 4 * * 1 <USERNAME> docker exec piefed_app1 bash -c "cd /app && ./remove_orphan_files.sh"

  File "/app/app/cli.py", line 1857, in populate_community_search
    resp = get_request(
        'https://raw.githubusercontent.com/disposable/disposable-email-domains/master/domains.txt')
  File "/app/app/utils.py", line 164, in get_request
    raise httpx.HTTPError(f"HTTPError: {str(e)}") from read_timeout
httpx.HTTPError: HTTPError: The read operation timed out
Running database migrations...

# compose.override.yaml
services:
  web:
    entrypoint:
      - /usr/bin/tini
      - "--"
      - /bin/bash
      - -c
      - |
        set -e
        export FLASK_APP=pyfedi.py
        echo "Running database migrations..."
        flask db upgrade
        flask populate_community_search || echo "WARN: populate_community_search failed (outbound to raw.githubusercontent.com blocked?)"
        if [[ "${CRON:-}" == [YyTt1]* ]]; then
          supercronic -quiet -no-reap /app/docker.cron &
        fi
        echo "Starting Gunicorn..."
        exec gunicorn --config gunicorn.conf.py --preload pyfedi:app

docker compose up -d web

WARN: populate_community_search failed (outbound to raw.githubusercontent.com blocked?)
Starting Gunicorn...
[2026-11-02 08:23:47 +0000] [7] [INFO] Starting gunicorn 26.2.0
[2026-11-02 08:23:47 +0000] [7] [INFO] Listening at: http://0.0.0.0:5000 (7)
[2026-11-02 08:23:47 +0000] [7] [INFO] Using worker: gthread
[2026-11-02 08:23:47 +0000] [28] [INFO] Booting worker with pid: 28

  File "/venv/lib/python3.13/site-packages/pwinput/__init__.py", line 93, in getch
    old_settings = termios.tcgetattr(fd)
termios.error: (25, 'Inappropriate ioctl for device')

docker exec -i piefed_app1 sh -c 'export FLASK_APP=pyfedi.py && flask shell' <<'PY'
from app import db
from app.models import User, Role, utcnow
from app.activitypub.signature import RsaKeys
from app.auth.util import random_token
from app.utils import gibberish
from random import randint
u = User(user_name='admin', title='admin', email='admin@piefed.test',
         verification_token=random_token(16), instance_id=1, email_unread_sent=False,
         alt_user_name=gibberish(randint(8, 20)))
pk, pub = RsaKeys.generate_keypair()
u.private_key, u.public_key = pk, pub
u.set_password('q1w2e3r4')
u.roles.append(Role.query.filter_by(name='Admin').first())
u.verified = True
u.last_seen = utcnow()
db.session.add(u); db.session.commit()
print('ADMIN_CREATED id=', u.id)
PY

  File "/app/pyfedi.py", line 103, in before_request
    site = get_site_as_dict()
...
AttributeError: 'NoneType' object has no attribute '__table__'