Add k3s deployment: Dockerfiles, nginx config, CI pipeline

- Backend Dockerfile: multi-stage rust:1.87 → debian:bookworm-slim
- Frontend Dockerfile: multi-stage node:22-alpine → nginx:alpine
- Frontend nginx.conf: serve static + proxy /api/ to backend service
- Change API_URL to relative /api for containerized deployment
- Woodpecker CI pipeline to build and push images to Gitea Registry
- Add repository URL to CLAUDE.md

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.woodpecker.yml

@@ -0,0 +1,30 @@
+when:
+  branch: main
+  event: push
+
+steps:
+  - name: build-backend
+    image: woodpeckerci/plugin-docker-buildx
+    settings:
+      repo: git.mikhailkilin.ru/killingdruid/bbb-backend
+      registry: git.mikhailkilin.ru
+      dockerfile: backend/Dockerfile
+      context: backend
+      tags: latest
+      username:
+        from_secret: gitea_username
+      password:
+        from_secret: gitea_password
+
+  - name: build-frontend
+    image: woodpeckerci/plugin-docker-buildx
+    settings:
+      repo: git.mikhailkilin.ru/killingdruid/bbb-frontend
+      registry: git.mikhailkilin.ru
+      dockerfile: frontend/Dockerfile
+      context: frontend
+      tags: latest
+      username:
+        from_secret: gitea_username
+      password:
+        from_secret: gitea_password

CLAUDE.md

@@ -1,5 +1,7 @@
 # Blood Brain Barrier
 
+**Репозиторий:** https://git.mikhailkilin.ru/killingdruid/blood-brain-barrier
+
 Веб-приложение для хранения текстовых записей. Пользователь вводит текст через textarea, сохраняет в PostgreSQL, просматривает список всех записей с возможностью удаления и копирования.
 
 ## Стек

backend/Dockerfile

@@ -0,0 +1,19 @@
+FROM rust:1.87 AS builder
+
+WORKDIR /app
+COPY Cargo.toml Cargo.lock* ./
+COPY src/ src/
+
+RUN cargo build --release
+
+FROM debian:bookworm-slim
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    libssl3 ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY --from=builder /app/target/release/backend /usr/local/bin/backend
+
+EXPOSE 3000
+
+CMD ["backend"]

frontend/Dockerfile

@@ -0,0 +1,16 @@
+FROM node:22-alpine AS builder
+
+WORKDIR /app
+COPY package.json package-lock.json* ./
+RUN npm ci
+COPY . .
+RUN npm run build
+
+FROM nginx:alpine
+
+COPY --from=builder /app/dist /usr/share/nginx/html
+COPY nginx.conf /etc/nginx/conf.d/default.conf
+
+EXPOSE 80
+
+CMD ["nginx", "-g", "daemon off;"]

frontend/nginx.conf

@@ -0,0 +1,17 @@
+server {
+    listen 80;
+    server_name _;
+
+    location / {
+        root /usr/share/nginx/html;
+        index index.html;
+        try_files $uri $uri/ /index.html;
+    }
+
+    location /api/ {
+        proxy_pass http://bbb-backend.bbb.svc.cluster.local:3000;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    }
+}

frontend/src/api.ts

@@ -1,4 +1,4 @@
-const API_URL = "http://localhost:3000/api";
+const API_URL = "/api";
 
 export interface EntryMeta {
   id: number;