Initial scaffold: Go backend, React frontend, Docker Compose

- Go backend: config, db (PostgreSQL migrations), auth (argon2id + sessions),
  middleware (cookie sessions, RequireAuth), chi router, cmd/server
- React frontend: Vite + React 18 + TS + Tailwind + Gruvbox palette + terminal CSS
- Docker: compose.yml (Postgres, Valkey, minio, LiveKit, coturn, Caddy),
  livekit.yaml, Caddyfile, Dockerfile (multi-stage Go+Node+Alpine)
- .env.example, .gitignore, README.md

docker/Caddyfile

@@ -0,0 +1,23 @@
+{
+    auto_https off
+}
+
+:80 {
+    handle_path /api/* {
+        reverse_proxy app:8080
+    }
+
+    handle_path /ws {
+        reverse_proxy app:8080
+    }
+
+    handle_path /livekit/* {
+        reverse_proxy livekit:7880
+    }
+
+    handle {
+        root * /srv/web
+        try_files {path} /index.html
+        file_server
+    }
+}

docker/Dockerfile

@@ -0,0 +1,21 @@
+FROM golang:1.24-alpine AS go-builder
+WORKDIR /app
+COPY go.mod go.sum ./
+RUN go mod download
+COPY . .
+RUN CGO_ENABLED=0 GOOS=linux go build -o /bin/dumpster-server ./cmd/server
+
+FROM node:22-alpine AS web-builder
+WORKDIR /app
+COPY web/package.json web/package-lock.json ./
+RUN npm ci
+COPY web/ .
+RUN npm run build
+
+FROM alpine:latest
+RUN apk --no-cache add ca-certificates
+WORKDIR /app
+COPY --from=go-builder /bin/dumpster-server /app/dumpster-server
+COPY --from=web-builder /app/dist /srv/web
+EXPOSE 8080
+CMD ["/app/dumpster-server"]

docker/compose.yml

@@ -0,0 +1,98 @@
+version: '3.8'
+
+services:
+  postgres:
+    image: postgres:16
+    container_name: dumpster-postgres
+    environment:
+      POSTGRES_USER: ${POSTGRES_USER:-dumpster}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-dumpster}
+      POSTGRES_DB: ${POSTGRES_DB:-dumpster}
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+    ports:
+      - "5432:5432"
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}"]
+      interval: 5s
+      timeout: 5s
+      retries: 5
+
+  valkey:
+    image: valkey/valkey:8
+    container_name: dumpster-valkey
+    volumes:
+      - valkey_data:/data
+    ports:
+      - "6379:6379"
+    healthcheck:
+      test: ["CMD", "valkey-cli", "ping"]
+      interval: 5s
+      timeout: 3s
+      retries: 5
+
+  minio:
+    image: minio/minio:latest
+    container_name: dumpster-minio
+    command: server /data --console-address ":9001"
+    environment:
+      MINIO_ROOT_USER: ${MINIO_ACCESS_KEY:-dumpster}
+      MINIO_ROOT_PASSWORD: ${MINIO_SECRET_KEY:-dumpster-secret}
+    volumes:
+      - minio_data:/data
+    ports:
+      - "9000:9000"
+      - "9001:9001"
+
+  livekit:
+    image: livekit/livekit-server:latest
+    container_name: dumpster-livekit
+    command: >
+      --config /etc/livekit.yaml
+    ports:
+      - "7880:7880"
+      - "7881:7881"
+      - "7882:7882/udp"
+      - "50000-50100:50000-50100/udp"
+    volumes:
+      - ./livekit.yaml:/etc/livekit.yaml:ro
+    environment:
+      LIVEKIT_KEYS: "${LIVEKIT_API_KEY}:${LIVEKIT_API_SECRET}"
+    depends_on:
+      - coturn
+
+  coturn:
+    image: coturn/coturn:latest
+    container_name: dumpster-coturn
+    command: >
+      -n --log-file=stdout
+      --external-ip=$$(detect-external-ip)
+      --min-port=10000 --max-port=20000
+      --realm=${DUMPSTER_HOST:-localhost}
+      --user=${LIVEKIT_API_KEY}:${LIVEKIT_API_SECRET}
+    ports:
+      - "3478:3478/tcp"
+      - "3478:3478/udp"
+      - "5349:5349/tcp"
+      - "5349:5349/udp"
+      - "10000-20000:10000-20000/udp"
+
+  caddy:
+    image: caddy:2
+    container_name: dumpster-caddy
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - ./Caddyfile:/etc/caddy/Caddyfile:ro
+      - caddy_data:/data
+      - caddy_config:/config
+    depends_on:
+      - app
+
+volumes:
+  postgres_data:
+  valkey_data:
+  minio_data:
+  caddy_data:
+  caddy_config:

docker/livekit.yaml

@@ -0,0 +1,16 @@
+port: 7880
+bind: 0.0.0.0
+rtc:
+  tcp_port: 7881
+  udp_port: 7882
+  use_external_ip: true
+  relay_range_start: 50000
+  relay_range_end: 50100
+turn:
+  enabled: true
+  domain: livekit.localhost
+  tls_port: 5349
+  udp_port: 3478
+  external_tls: false
+keys:
+  devkey: secret