chore: update docker-compose for portainer stack and refine deployment docs

Author: oxonium0215

docker-compose.prod.yml

@@ -10,7 +10,7 @@ services:
       db:
         condition: service_healthy
     env_file:
-      - .env
+      - stack.env
     environment:
       GDAL_LIBRARY_PATH: /usr/lib/x86_64-linux-gnu/libgdal.so
     command: >
@@ -25,10 +25,14 @@ services:
       - static_volume:/app/static
     depends_on:
       - web
+    env_file:
+      - stack.env
   tailscale:
     image: tailscale/tailscale:latest
     container_name: tailscale
     hostname: ${TS_HOSTNAME:-kc3hack-2026-team14}
+    env_file:
+      - stack.env
     environment:
       - TS_AUTHKEY=${TS_AUTHKEY}
       - TS_STATE_DIR=/var/lib/tailscale
@@ -56,6 +60,8 @@ services:
       - postgres_data:/var/lib/postgresql/data
     expose:
       - "5432"
+    env_file:
+      - stack.env
     healthcheck:
       test: [ "CMD-SHELL", "pg_isready -U ${POSTGRES_USER} -d ${POSTGRES_DB}" ]
       interval: 5s
@@ -69,6 +75,8 @@ services:
     expose:
       - "9000"
       - "9001"
+    env_file:
+      - stack.env
     command: server /data --console-address ":9001"
     healthcheck:
       test: [ "CMD", "curl", "-f", "http://localhost:9000/minio/health/live" ]
@@ -80,13 +88,17 @@ services:
     depends_on:
       minio:
         condition: service_healthy
+    env_file:
+      - stack.env
     entrypoint: >
       /bin/sh -c " until mc alias set myminio http://minio:9000 \${MINIO_ROOT_USER} \${MINIO_ROOT_PASSWORD}; do echo 'Waiting...'; sleep 1; done; mc mb myminio/\${MINIO_BUCKET_NAME} || true; mc anonymous set download myminio/\${MINIO_BUCKET_NAME}; exit 0; "
 
   watchtower:
     image: containrrr/watchtower
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
+    env_file:
+      - stack.env
     environment:
       DOCKER_API_VERSION: "1.44"
       REPO_USER: ${GH_USERNAME}

docs/deployment.md

@@ -13,9 +13,24 @@
 1. GitHub の [Personal Access Tokens](https://github.com/settings/tokens) (Classic) で `read:packages` 権限を持つトークンを作成
 2. サーバー上で以下のコマンドを実行して GHCR にログイン
    ```bash
+   ```
    echo "YOUR_PAT" | docker login ghcr.io -u YOUR_GITHUB_USERNAME --password-stdin
    ```
 
+## Portainer へのレジストリ追加
+
+1. Portainer にログインし、左メニューの Settings -> Registries を選択
+2. Add registry をクリック
+3. Custom registry を選択
+4. 以下の情報を入力：
+   - Name: `GitHub Container Registry` (任意の名前)
+   - Registry URL: `ghcr.io`
+   - Authentication: ON
+   - Username: GitHubのユーザー名
+   - Password: GitHubのPersonal Access Token (PAT)
+5. Add registry をクリック
+
+
 ## デプロイ手順
 
 1. Portainer にログイン