Make documentation standalone and generalize examples

docker/compose.local.yml

@@ -1,7 +1,6 @@
-# Integrated local stack — layered on top of compose.yml + compose.dev.yml by
-# the root `make dev`. Reattaches this stack's Traefik to the shared external
-# `proxy` network so it also routes the website stack's containers, and serves
-# everything over plain http on *.${DOMAIN} (default *.localhost).
+# Local proxy stack, layered over compose.yml + compose.dev.yml by
+# `make dev-local`. Traefik joins the external `proxy` network and serves
+# plain HTTP on *.${DOMAIN} (default *.localhost).
 
 # Everything here is reachable through Traefik on *.${DOMAIN}, so the host ports
 # compose.dev.yml publishes are dropped: they add nothing and make the whole
@@ -34,6 +33,6 @@ services:
       - BACKEND_CORS_ORIGINS=http://${DOMAIN:-localhost},http://app.${DOMAIN:-localhost},http://localhost:5173
 
 networks:
-  # Shared with the website stack; created by the root scripts/setup.sh.
+  # External reverse-proxy network. Created by `make init`.
   proxy:
     external: true

docker/compose.yml

@@ -146,9 +146,8 @@ services:
       # rebuild would silently stop every phone being notified: the key they
       # subscribed against would be gone.
       - WEBPUSH_FILE=/data/webpush.json
-      # Schedules are written in local time: "off at 02:00" means the house's
-      # two in the morning, not the container's. Unset, an image is UTC, and a
-      # cron would be right twice a year.
+      # Cron schedules use this timezone. Set it to the timezone your flows
+      # should follow; the image defaults to UTC.
       - TZ=${TZ:-UTC}
 
     volumes:
@@ -248,7 +247,8 @@ services:
   # process per port. Credentials are minted by the backend from the same
   # TURN_SECRET (coturn's REST scheme), so nothing is stored here. The secret
   # goes in through a config file rather than the command line, which `ps`
-  # shows. See DEPLOY.md for ports, DNS and certificates.
+  # shows. Configure ports with TURN_MIN_PORT and TURN_MAX_PORT and mount
+  # certificates under TURN_CERT_DIR below.
   coturn:
     logging: *logging
     image: coturn/coturn:4.6.3
@@ -348,7 +348,6 @@ volumes:
   app-flow-data:
 
 networks:
-  # Shared with the website stack and whatever reverse proxy fronts them.
-  # Created once by the workspace root's scripts/setup.sh.
+  # External reverse-proxy network. Created by `make init`.
   proxy:
     external: true