From 2002ea7b32861afe9b4668f0f0b9eb23fdc115f1 Mon Sep 17 00:00:00 2001
From: docker-claude <user@docker-claude.local>
Date: Wed, 15 Apr 2026 21:19:33 +0200
Subject: [PATCH] chore(registry): use docker-public registry path

Update image references from registry.zeidler.dev/docker/playground to
registry.zeidler.dev/docker-public/playground in docker-compose.yml and build.sh.
Also bind-mount ${HOME}/.claude instead of using the claude-config named volume.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 build.sh           | 2 +-
 docker-compose.yml | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/build.sh b/build.sh
index 75127ba..fe5f818 100644
--- a/build.sh
+++ b/build.sh
@@ -4,7 +4,7 @@
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-REGISTRY="registry.zeidler.dev/docker/playground"
+REGISTRY="registry.zeidler.dev/docker-public/playground"
 TAG="${IMAGE_TAG:-latest}"
 
 GREEN='\033[0;32m'; NC='\033[0m'
diff --git a/docker-compose.yml b/docker-compose.yml
index 6242267..411b00e 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -3,7 +3,7 @@ services:
   # Bridges the isolated internal network to the internet.
   # Enforces an egress allowlist — see proxy/squid.conf.
   proxy:
-    image: registry.zeidler.dev/docker/playground/docker-claude-proxy:${IMAGE_TAG:-latest}
+    image: registry.zeidler.dev/docker-public/playground/docker-claude-proxy:${IMAGE_TAG:-latest}
     networks:
       - claude-internal # reachable by claude and webui containers
       - proxy-external # has outbound internet access
@@ -22,7 +22,7 @@ services:
   # No direct internet access. All egress routes through the proxy sidecar.
   # Run via "docker compose run --rm --service-ports claude" (managed by claude.sh).
   claude:
-    image: registry.zeidler.dev/docker/playground/docker-claude-claude:${IMAGE_TAG:-latest}
+    image: registry.zeidler.dev/docker-public/playground/docker-claude-claude:${IMAGE_TAG:-latest}
     depends_on:
       proxy:
         condition: service_healthy
@@ -46,7 +46,7 @@ services:
       # OAuth callback — required for browser-based login (claude login)
       - "0.0.0.0:54545:54545"
     volumes:
-      - claude-config:/home/node/.claude
+      - ${HOME}/.claude:/home/node/.claude
       # Workspace is injected by claude.sh via --volume flag at run time (current directory).
     security_opt:
       - no-new-privileges:true
@@ -60,7 +60,7 @@ services:
   # Protected by HTTP basic auth — set WEBUI_USER / WEBUI_PASSWORD in .env.
   # Network isolation is identical to the CLI container.
   webui:
-    image: registry.zeidler.dev/docker/playground/docker-claude-claude:${IMAGE_TAG:-latest}
+    image: registry.zeidler.dev/docker-public/playground/docker-claude-claude:${IMAGE_TAG:-latest}
     entrypoint: ["/usr/local/bin/webui-entrypoint.sh"]
     depends_on:
       proxy: