Local, Docker, Kubernetes and hosted
| Profile | Core | Execution | Operator responsibility |
|---|---|---|---|
| Local Docker Compose | Golf React/Go, Forgejo, separate PostgreSQL roles/databases | Optional enrolled Docker workers and private object storage | Private environment files, account enrollment, loopback origins, persistent volumes |
| Docker beyond localhost | Same portable core with explicit secure public origins | Explicitly configured workers/agents | TLS, DNS, credential storage, network policy, backup/restore acceptance |
| Kubernetes / Helm | Golf replicas, Forgejo and optional bundled PostgreSQL | Core chart does not install Docker runners or every agent service | Exact image, existing namespace Secret, storage, ingress and enforcing CNI |
| Native Cloudflare | Workers, Artifacts Git, D1, SQLite Durable Objects | Queues, Workflows, approved Containers and optional proposals | Account eligibility, domain, Access enrollment, resource/token ownership, quotas and cleanup |
These are infrastructure choices, not separate product editions. Optional provider adapters do not transfer canonical ownership automatically.
Portable release boundary
Current portable installations, including fresh Compose and Helm setups, use Forgejo. Provider transfer and recovery still require verified private-data/identity fidelity; a source import is not complete disaster recovery.
The chart packages a bounded core. Two API replicas with one forge writer do not establish multi-node storage fencing or production HA. Consult the chart guide and Forgejo setup.
Hosted release boundary
Real native Git, collaboration, evidence, proposals and protected previews have bounded hosted acceptance. Full feature parity, general production CD, disaster recovery, multi-tenant onboarding and global scale remain open. See Cloudflare setup.