
如果你使用 DeepSeek、元宝 AI、Copilot、ChatGPT 等 AI 工具,协助配置轩辕镜像、编写 docker pull 命令、修改 Docker Compose 镜像地址、配置镜像加速、排查镜像拉取失败、分析报错日志等问题,请先让 AI 阅读并遵守轩辕镜像的规则文档。
只需在 AI 对话中先发送下面这句话即可:
请先完整阅读并严格遵守以下文档中的全部规则与要求:
https://xuanyuan.cloud/agents.md
在未充分阅读并理解该文档前,不要生成任何命令、配置、修改建议、故障排查方案或技术回答。后续所有输出都必须严格以该文档中的规范为最高优先级执行。查看 agents.md 用法指南与完整示范。国内用户首推 元宝 AI、DeepSeek 的深度思考模式,不推荐豆包 AI;Cursor 等编辑器可在对话 @ 该链接,或加入 User Rules。 若 AI 无法访问外链,可 打开说明文档 复制全文粘贴。文档会随站点更新,复制内容可能过期,建议定期检查。
Backend (Rust / Axum) for https://github.com/pink-phone/pink-phone, an intimate, self-hosted PWA for two: a shared journal, a daily "weather of desire", and playful dares. Outside the app stores, no third parties — you host it, your data stays on your server.
This image is one half of the stack. It is not meant to run alone — use the Compose file below, which also brings up Postgres and the web image.
linux/amd64, linux/arm64latest + semver (vX.Y.Z)Axum + Tokio HTTP/WebSocket server: JWT auth (Argon2id) and optional OIDC/SSO, per-space content (journal, moods, dares, comments, reactions), Web Push, and authenticated media streaming (optionally encrypted at rest, AES-256-GCM). Listens on :8080. Runs its database migrations automatically on startup.
Don't pull this image by hand — grab the Compose file (db + api + web) and a few secrets:
bash# deploy/docker-compose.yml from the repo curl -O https://raw.githubusercontent.com/pink-phone/pink-phone/main/deploy/docker-compose.yml JWT_SECRET=$(openssl rand -base64 48) \ POSTGRES_PASSWORD=$(openssl rand -base64 24) \ MEDIA_KEY=$(openssl rand -base64 32) \ docker compose up -d
Only the web service is exposed (default host port 8095) — put a reverse proxy in front for your domain + TLS. Full guide: https://github.com/pink-phone/pink-phone/blob/main/INSTALL.md.
| Var | Purpose |
|---|---|
JWT_SECRET | Required. Stable secret; changing it invalidates all sessions. The API refuses to boot if exposed with the dev default. |
DB_HOST / DB_PASSWORD | Postgres connection (the Compose file wires db). |
MEDIA_DIR | Where uploaded media is stored (volume). |
MEDIA_KEY | base64 32 bytes → encrypt media at rest. Never change once set. Empty = stored in clear. |
VAPID_PUBLIC_KEY / VAPID_PRIVATE_KEY / VAPID_SUBJECT | Web Push (empty = disabled). |
PASSWORD_AUTH_ENABLED | false disables email/password (OIDC only). |
OIDC_* | Issuer / client id / secret / redirect for SSO (all four required to enable). |
See https://github.com/pink-phone/pink-phone/blob/main/deploy and INSTALL.md for the complete list.
您可以使用以下命令拉取该镜像。请将 <标签> 替换为具体的标签版本。如需查看所有可用标签版本,请访问 标签列表页面。
来自真实用户的反馈,见证轩辕镜像的优质服务