feat: add OpenCode template

[skender18]

What

Adds an OpenCode template: a self-hosted, password-protected web UI for the open-source AI coding agent.

How it works

• Official image only: ghcr.io/anomalyco/opencode:1.18.32 (no custom image).
• The upstream image ships neither git nor a toolchain, so it is provisioned on start-up via apk and is configurable with TOOLCHAIN_PACKAGES (set to "" to disable; default git nodejs npm python3).
• Optional first-run clone: set GIT_REPO_URL (and GIT_TOKEN for private repos) and the repo is cloned into /workspace. The token is written to /root/.git-credentials (credential.helper store), so the git remote URL stays clean.
• Persistent volumes for OpenCode data, config and workspace.
• Auto-generated sslip.io domain with https = true.

Tested

Deployed from this branch on a Dokploy instance:

• image pulls and opencode serve listens on 0.0.0.0:4096;
• apk add $TOOLCHAIN_PACKAGES installs git/nodejs/npm/python3;
• domain routing (serviceName: opencode, port 4096): 401 without auth, OpenCode UI with the generated password;
• Let's Encrypt issues a valid certificate for the generated sslip.io host;
• auto-clone verified against a private GitHub repo + PAT.

Same validators as CI run locally and pass: generate-meta.js --check, validate-docker-compose.ts, validate-template.ts.

Note

The start-up apk add is required because the upstream image does not ship git (see anomalyco/opencode#27743). If git (and optionally node/python) lands in the official image, this template can be reduced to the image + opencode serve.

Known limitation

The built-in web terminal (Toggle terminal, Ctrl+\``) does not start on the official Alpine image. The image ships the musl build, but the bundled PTY native library is glibc-linked, so POST /api/pty` fails with:

Failed to open library "...so": Error loading shared library ld-linux-x86-64.so.2: No such file or directory

Reproduced with ghcr.io/anomalyco/opencode:1.18.32 (Alpine, musl). The rest of the web UI works normally (chat, file edits, commands run through the agent). A glibc base (Debian) with the opencode-linux-x64.tar.gz release binary starts the PTY and runs a shell correctly. This is an upstream image issue, not specific to this template.

[github-actions]

built with Refined Cloudflare Pages Action

⚡ Cloudflare Pages Deployment

Name	Status	Preview	Last Commit
templates	✅ Ready (View Log)	Visit Preview	f7dd6b9