fix for minio docker image

.gitignore

@@ -10,6 +10,9 @@ node_modules/
 __pycache__/
 *.py[cod]
 *$py.class
+# install-prereqs.sh / owpengram-server.sh create this for the panel's packages.
+# Untracked and unignored, it was one `git clean -fd` away from being deleted.
+/.venv/
 
 # 本地环境 / 密钥（server RSA private key 必须持久化，但禁止入库）
 .env

README.md

@@ -94,6 +94,15 @@ Some items are compatibility-first or experimental, but they are real open
 server code, not hidden product-only features.
 </details>
 
+## 🚀 Want to see it first?
+
+You do not have to run a server to try OwpenGram. We keep a **public server
+live**, and it ships inside both clients as a ready-made entry — install a
+client, pick **OwpenGram** on the server-selection screen, sign in. Nothing to
+configure.
+
+Come back here when you want that server to be yours.
+
 ## ⚡ Quick Start
 
 **1. Clone the repository**
@@ -425,6 +434,8 @@ the public routes to it with HTTPS.
 
 Use the OwpenGram clients, which have a built-in **Add Server** option on the
 server-selection screen at login — no source patching or custom build needed.
+They also ship with our public server already in that list, so a client is
+useful the moment it is installed, with or without a server of your own.
 Both are forks of the official apps, kept on the same TL layer as the server and
 rebased on the upstream release that introduced it:
 

deploy/docker-compose.yml

@@ -70,7 +70,12 @@ services:
   # 桶由 telesrv 自己在启动时按需创建（internal/app/files/blobs3.go 的 NewS3FS），
   # 这里不需要额外的 mc 初始化容器。控制台（9001）仅用于本地调试查看已存对象。
   minio:
-    image: minio/minio:latest
+    # quay.io, not Docker Hub: MinIO stopped serving minio/minio to anonymous
+    # pulls there, so `docker compose up` failed on a fresh machine with
+    # "pull access denied ... or may require 'docker login'" -- for every tag,
+    # not just latest. quay.io/minio/minio is MinIO's own registry and needs
+    # no login.
+    image: quay.io/minio/minio:latest
     container_name: ${TELESRV_DOCKER_PREFIX:-owpengram}-minio
     command: ["server", "/data", "--console-address", ":9001"]
     environment: