Pull the image from Gitea's registry instead of building locally

docker-compose.yml now references gitea.apointless.space/bsncubed/
boarding-pass:latest by default; building from source is still available
by swapping image: back to build: .

README.md

@@ -29,14 +29,17 @@ local state, no task queue — a background thread handles the daily job.
    (or edit `docker-compose.yml` to point at whatever network your NPMplus
    container is already on.)
 
-3. Build and start:
+3. Log in to Gitea's container registry (see "Pulling the pre-built image"
+   below for the token you need), then pull and start:
 
    ```
-   docker compose up -d --build
+   docker login gitea.apointless.space -u bsncubed
+   docker compose pull
+   docker compose up -d
    ```
 
-   Or, to use the pre-built image from Gitea's container registry instead of
-   building locally, see "Pulling the pre-built image" below.
+   To build locally from source instead, change `image:` back to `build: .`
+   in `docker-compose.yml` and run `docker compose up -d --build`.
 
 4. Add a proxy host in NPMplus pointing at `boarding-pass:8080`, behind
    Authelia, **except** for the two paths below (see "Approve/Deny callback
@@ -77,33 +80,28 @@ the nginx match beyond these two paths.
 
 ## Pulling the pre-built image
 
-Images are pushed to Gitea's container registry at
-`gitea.apointless.space/bsncubed/boarding-pass`. To pull instead of building
-locally:
+`docker-compose.yml` points `boarding-pass` at
+`gitea.apointless.space/bsncubed/boarding-pass:latest` by default rather than
+building locally. To pull it you need to be logged in:
 
 ```bash
 docker login gitea.apointless.space -u bsncubed
-docker pull gitea.apointless.space/bsncubed/boarding-pass:latest
 ```
 
 Gitea's web login goes through Authelia (OIDC), but that's a browser SSO
 flow that `docker login` can't do — the registry still authenticates with a
 plain Gitea **personal access token**, not your Authelia/account password.
 Generate one under Gitea → Settings → Applications with `read:package` scope
-(`write:package` too if you'll also be pushing) and use it as the password.
+(`write:package` too if you'll also be pushing new builds) and use it as the
+password.
 
-Then point `docker-compose.yml` at the image instead of building:
+Pull new versions with:
 
-```yaml
-services:
-  boarding-pass:
-    image: gitea.apointless.space/bsncubed/boarding-pass:latest
-    # remove/comment out "build: ." above
-    ...
+```bash
+docker compose pull
+docker compose up -d
 ```
 
-and pull new versions with `docker compose pull && docker compose up -d`.
-
 ## Re-running the reference data build
 
 `data/airports.csv` and `data/airlines.csv` are trimmed snapshots of