diff --git a/.gitignore b/.gitignore
index bad9c67..a3886cf 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,4 @@
 .env.keys
-node_modules
\ No newline at end of file
+node_modules
+data
+*.decrypted
\ No newline at end of file
diff --git a/.vscode/settings.json b/.vscode/settings.json
new file mode 100644
index 0000000..bb8b71f
--- /dev/null
+++ b/.vscode/settings.json
@@ -0,0 +1,17 @@
+{
+    "deno.enable": true,
+    "dotenv.enableAutocloaking": false,
+    "git.alwaysSignOff": true,
+    "conventionalCommits.scopes": [
+        "readme",
+        "docs",
+        "scripts",
+        "gitlab-ci",
+        "homelab",
+        "docker",
+        "global"
+    ],
+    "files.associations": {
+        "script/*": "shellscript"
+    }
+}
\ No newline at end of file
diff --git a/docker/infra-ci/Dockerfile b/docker/infra-ci/Dockerfile
new file mode 100644
index 0000000..c586930
--- /dev/null
+++ b/docker/infra-ci/Dockerfile
@@ -0,0 +1,11 @@
+#syntax=docker/dockerfile:experimental
+ARG DEPENDENCY_PROXY="mau.dev/andreijiroh-dev/dependency_proxy/containers"
+FROM ${DEPENDENCY_PROXY}/denoland/deno:bin as deno
+FROM ${DEPENDENCY_PROXY}/python:3.12 as base
+
+COPY --from=deno /deno /usr/bin/deno
+
+RUN pip3 install --no-cache pipenv pipx \
+    && pipx install --global --include-deps octodns-cloudflare octodns mkdocs
+
+ENTRYPOINT [ "/bin/bash" ]
\ No newline at end of file
diff --git a/docker/nest/docker-compose.yml b/docker/nest/docker-compose.yml
index b3cf016..be04fee 100644
--- a/docker/nest/docker-compose.yml
+++ b/docker/nest/docker-compose.yml
@@ -11,20 +11,26 @@ services:
     environment:
       database__client: mysql
       database__connection__host: db
-      database__connection__user: root
-      database__connection__password: mysql-cahos
+      database__connection__user: ghost
+      database__connection__password: ghost-docker
       database__connection__database: ghost
       url: https://blog.andreijiroh.dev
     env_file: .env.ghost.decrypted
     volumes:
       - ./data/ghost:/var/lib/ghost/content
+    depends_on:
+      - db
   db:
+    domainname: mysql.internal
     networks:
     - internal
     image: mysql:8.0
-    restart: always
+    restart: unless-stopped
     environment:
       MYSQL_ROOT_PASSWORD: mysql-chaos
+      MYSQL_USER: ghost
+      MYSQL_PASSWORD: ghost-docker
+      MYSQL_DATABASE: ghost
     volumes:
       - ./data/mysql:/var/lib/mysql