chore(demo): default theme breeze-dark

chore(demo): clarify theme exception
feat(settings): instance theme
2026-03-26 19:03:08 +00:00 · 2026-02-15 20:52:39 +01:00 · 2026-02-15 20:39:03 +01:00 · 2026-02-15 20:07:55 +01:00 · 2026-02-15 17:06:01 +01:00 · 2026-02-15 16:55:57 +01:00
32 changed files with 526 additions and 415 deletions
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@ -18,7 +18,7 @@
 - MSVC toolchain for Rust

 **Linux:**
- podman-compose
+- podman compose

 ### Quick Setup

--- a/DEPLOYMENT.md
+++ b/DEPLOYMENT.md
@ -44,7 +44,7 @@ cp compose/.env.production.example compose/.env.production

 # 4. Deploy
 cd compose
-podman-compose --env-file .env.production -f production.yml up -d
+podman compose --env-file .env.production -f production.yml up -d

 # 5. Access at http://localhost:4321
 ```
@ -57,7 +57,7 @@ cp compose/.env.demo.example compose/.env.demo

 # 2. Deploy
 cd compose
-podman-compose --env-file .env.demo -f demo.yml up -d
+podman compose --env-file .env.demo -f demo.yml up -d

 # 3. Access at http://localhost:4322
 ```
@ -105,8 +105,8 @@ To reset the demo to a clean state:
 ./scripts/demo-reset.sh

 # Or manually:
-podman-compose --env-file compose/.env.demo -f compose/demo.yml down -v
-podman-compose --env-file compose/.env.demo -f compose/demo.yml up -d
+podman compose --env-file compose/.env.demo -f compose/demo.yml down -v
+podman compose --env-file compose/.env.demo -f compose/demo.yml up -d
 ```

 ## Configuration Reference
@ -141,7 +141,7 @@ For local development without containers:

 ```bash
 # 1. Start only the database
-podman-compose -f compose/dev.yml up -d
+podman compose -f compose/dev.yml up -d

 # 2. Configure backend environment
 cp backend/.env.example backend/.env
@ -159,10 +159,10 @@ npm run dev

 ```bash
 # View all logs
-podman-compose --env-file compose/.env.demo -f compose/demo.yml logs -f
+podman compose --env-file compose/.env.demo -f compose/demo.yml logs -f

 # View specific service
-podman-compose --env-file compose/.env.demo -f compose/demo.yml logs -f backend
+podman compose --env-file compose/.env.demo -f compose/demo.yml logs -f backend

 # Check health
 curl http://localhost:3001/health
@ -173,10 +173,10 @@ curl http://localhost:3001/health
 ### Database connection issues
 ```bash
 # Check if postgres is running
-podman-compose --env-file compose/.env.demo -f compose/demo.yml ps
+podman compose --env-file compose/.env.demo -f compose/demo.yml ps

 # View postgres logs
-podman-compose --env-file compose/.env.demo -f compose/demo.yml logs postgres
+podman compose --env-file compose/.env.demo -f compose/demo.yml logs postgres
 ```

 ### Migration failures
@ -194,6 +194,6 @@ SELECT * FROM _sqlx_migrations;
 ### Reset everything
 ```bash
 # Nuclear option - removes all data and volumes
-podman-compose --env-file compose/.env.demo -f compose/demo.yml down -v
-podman-compose --env-file compose/.env.demo -f compose/demo.yml up -d
+podman compose --env-file compose/.env.demo -f compose/demo.yml down -v
+podman compose --env-file compose/.env.demo -f compose/demo.yml up -d
 ```
--- a/README.md
+++ b/README.md
@ -82,7 +82,7 @@ Likwid implements a set of principles for **modular governance infrastructure**:

 **Linux:**

- Podman + podman-compose
+- Podman + podman compose
 - Rust (rustup)
 - Node.js LTS

--- a/WORKFLOW.md
+++ b/WORKFLOW.md
@ -66,7 +66,7 @@ sqlx migrate run --source migrations_demo
 ```bash
 # Uses separate database on port 5433, backend on 3001, frontend on 4322
 cp compose/.env.demo.example compose/.env.demo
-podman-compose --env-file compose/.env.demo -f compose/demo.yml up -d
+podman compose --env-file compose/.env.demo -f compose/demo.yml up -d
 ```

 ### For real users (Production)
@ -76,7 +76,7 @@ cp compose/.env.production.example compose/.env.production
 # Edit with secure passwords and your domain

 # 2. Deploy
-podman-compose --env-file compose/.env.production -f compose/production.yml up -d
+podman compose --env-file compose/.env.production -f compose/production.yml up -d
 ```

 ## Common Tasks
--- a/backend/.sqlx/query-0620f314de8df0c7990ef63fda55f2ff646d5159c59d8288e4ffdfdb07dc159f.json
+++ b/backend/.sqlx/query-0620f314de8df0c7990ef63fda55f2ff646d5159c59d8288e4ffdfdb07dc159f.json
@ -1,6 +1,6 @@
 {
  "db_name": "PostgreSQL",
-  "query": "SELECT id, setup_completed, instance_name, platform_mode,\n                  registration_enabled, registration_mode,\n                  default_community_visibility, allow_private_communities,\n                  default_plugin_policy, default_moderation_mode\n           FROM instance_settings LIMIT 1",
+  "query": "SELECT id, setup_completed, instance_name, platform_mode,\n                  theme_id, registration_enabled, registration_mode,\n                  default_community_visibility, allow_private_communities,\n                  default_plugin_policy, default_moderation_mode\n           FROM instance_settings LIMIT 1",
  "describe": {
    "columns": [
      {
@ -25,31 +25,36 @@
      },
      {
        "ordinal": 4,
+        "name": "theme_id",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 5,
        "name": "registration_enabled",
        "type_info": "Bool"
      },
      {
-        "ordinal": 5,
+        "ordinal": 6,
        "name": "registration_mode",
        "type_info": "Varchar"
      },
      {
-        "ordinal": 6,
+        "ordinal": 7,
        "name": "default_community_visibility",
        "type_info": "Varchar"
      },
      {
-        "ordinal": 7,
+        "ordinal": 8,
        "name": "allow_private_communities",
        "type_info": "Bool"
      },
      {
-        "ordinal": 8,
+        "ordinal": 9,
        "name": "default_plugin_policy",
        "type_info": "Varchar"
      },
      {
-        "ordinal": 9,
+        "ordinal": 10,
        "name": "default_moderation_mode",
        "type_info": "Varchar"
      }
@ -67,8 +72,9 @@
      false,
      false,
      false,
+      false,
      false
    ]
  },
-  "hash": "18c0fb05da45a3eea514f660bc4ac4d6aca71442645666a9c08db8f2a564ff6c"
+  "hash": "0620f314de8df0c7990ef63fda55f2ff646d5159c59d8288e4ffdfdb07dc159f"
 }
--- a/backend/.sqlx/query-593dc329afc129680dd505221df649aa8cb544841fa78a5fe740adfbb4439502.json
+++ b/backend/.sqlx/query-593dc329afc129680dd505221df649aa8cb544841fa78a5fe740adfbb4439502.json
@ -1,6 +1,6 @@
 {
  "db_name": "PostgreSQL",
-  "query": "SELECT setup_completed, instance_name, platform_mode,\n                  registration_enabled, registration_mode,\n                  single_community_id\n           FROM instance_settings\n           LIMIT 1",
+  "query": "SELECT setup_completed, instance_name, theme_id, platform_mode,\n                  registration_enabled, registration_mode,\n                  single_community_id\n           FROM instance_settings\n           LIMIT 1",
  "describe": {
    "columns": [
      {
@ -15,21 +15,26 @@
      },
      {
        "ordinal": 2,
-        "name": "platform_mode",
+        "name": "theme_id",
        "type_info": "Varchar"
      },
      {
        "ordinal": 3,
+        "name": "platform_mode",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 4,
        "name": "registration_enabled",
        "type_info": "Bool"
      },
      {
-        "ordinal": 4,
+        "ordinal": 5,
        "name": "registration_mode",
        "type_info": "Varchar"
      },
      {
-        "ordinal": 5,
+        "ordinal": 6,
        "name": "single_community_id",
        "type_info": "Uuid"
      }
@ -43,8 +48,9 @@
      false,
      false,
      false,
+      false,
      true
    ]
  },
-  "hash": "200e864fa5778cf58d36d49f94a4006f7d104eb84e6f166b795df0f222ee93d8"
+  "hash": "593dc329afc129680dd505221df649aa8cb544841fa78a5fe740adfbb4439502"
 }
--- a/backend/.sqlx/query-8dd178663df95d64d72c776e3b8bda63851d2ad0e13a6d80b327610078ecbaeb.json
+++ b/backend/.sqlx/query-8dd178663df95d64d72c776e3b8bda63851d2ad0e13a6d80b327610078ecbaeb.json
@ -1,6 +1,6 @@
 {
  "db_name": "PostgreSQL",
-  "query": "UPDATE instance_settings SET\n            setup_completed = true,\n            setup_completed_at = NOW(),\n            setup_completed_by = $1,\n            instance_name = $2,\n            platform_mode = $3,\n            single_community_id = $4\n           RETURNING id, setup_completed, instance_name, platform_mode,\n                     registration_enabled, registration_mode,\n                     default_community_visibility, allow_private_communities,\n                     default_plugin_policy, default_moderation_mode",
+  "query": "UPDATE instance_settings SET\n            setup_completed = true,\n            setup_completed_at = NOW(),\n            setup_completed_by = $1,\n            instance_name = $2,\n            platform_mode = $3,\n            single_community_id = $4\n           RETURNING id, setup_completed, instance_name, platform_mode,\n                     theme_id,\n                     registration_enabled, registration_mode,\n                     default_community_visibility, allow_private_communities,\n                     default_plugin_policy, default_moderation_mode",
  "describe": {
    "columns": [
      {
@ -25,31 +25,36 @@
      },
      {
        "ordinal": 4,
+        "name": "theme_id",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 5,
        "name": "registration_enabled",
        "type_info": "Bool"
      },
      {
-        "ordinal": 5,
+        "ordinal": 6,
        "name": "registration_mode",
        "type_info": "Varchar"
      },
      {
-        "ordinal": 6,
+        "ordinal": 7,
        "name": "default_community_visibility",
        "type_info": "Varchar"
      },
      {
-        "ordinal": 7,
+        "ordinal": 8,
        "name": "allow_private_communities",
        "type_info": "Bool"
      },
      {
-        "ordinal": 8,
+        "ordinal": 9,
        "name": "default_plugin_policy",
        "type_info": "Varchar"
      },
      {
-        "ordinal": 9,
+        "ordinal": 10,
        "name": "default_moderation_mode",
        "type_info": "Varchar"
      }
@ -72,8 +77,9 @@
      false,
      false,
      false,
+      false,
      false
    ]
  },
-  "hash": "b9586185e84644f0bd936d7bf5e9bec6ebeaba77ab354d0b7096d9334656497f"
+  "hash": "8dd178663df95d64d72c776e3b8bda63851d2ad0e13a6d80b327610078ecbaeb"
 }
--- a/backend/.sqlx/query-a903d88370faa52169ffd4ec6a54a789ee4a6173fe84aca0ef8dedaa46b1f93c.json
+++ b/backend/.sqlx/query-a903d88370faa52169ffd4ec6a54a789ee4a6173fe84aca0ef8dedaa46b1f93c.json
@ -1,6 +1,6 @@
 {
  "db_name": "PostgreSQL",
-  "query": "UPDATE instance_settings SET\n            instance_name = COALESCE($1, instance_name),\n            platform_mode = COALESCE($2, platform_mode),\n            registration_enabled = COALESCE($3, registration_enabled),\n            registration_mode = COALESCE($4, registration_mode)\n           RETURNING id, setup_completed, instance_name, platform_mode,\n                     registration_enabled, registration_mode,\n                     default_community_visibility, allow_private_communities,\n                     default_plugin_policy, default_moderation_mode",
+  "query": "UPDATE instance_settings SET\n            instance_name = COALESCE($1, instance_name),\n            theme_id = COALESCE($2, theme_id),\n            platform_mode = COALESCE($3, platform_mode),\n            registration_enabled = COALESCE($4, registration_enabled),\n            registration_mode = COALESCE($5, registration_mode)\n           RETURNING id, setup_completed, instance_name, platform_mode,\n                     theme_id, registration_enabled, registration_mode,\n                     default_community_visibility, allow_private_communities,\n                     default_plugin_policy, default_moderation_mode",
  "describe": {
    "columns": [
      {
@ -25,37 +25,43 @@
      },
      {
        "ordinal": 4,
+        "name": "theme_id",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 5,
        "name": "registration_enabled",
        "type_info": "Bool"
      },
      {
-        "ordinal": 5,
+        "ordinal": 6,
        "name": "registration_mode",
        "type_info": "Varchar"
      },
      {
-        "ordinal": 6,
+        "ordinal": 7,
        "name": "default_community_visibility",
        "type_info": "Varchar"
      },
      {
-        "ordinal": 7,
+        "ordinal": 8,
        "name": "allow_private_communities",
        "type_info": "Bool"
      },
      {
-        "ordinal": 8,
+        "ordinal": 9,
        "name": "default_plugin_policy",
        "type_info": "Varchar"
      },
      {
-        "ordinal": 9,
+        "ordinal": 10,
        "name": "default_moderation_mode",
        "type_info": "Varchar"
      }
    ],
    "parameters": {
      "Left": [
+        "Varchar",
        "Varchar",
        "Varchar",
        "Bool",
@ -72,8 +78,9 @@
      false,
      false,
      false,
+      false,
      false
    ]
  },
-  "hash": "c35608b0d7569f739dda24b3da59b7b500ff26f5e79433b3f7e3625d91177d26"
+  "hash": "a903d88370faa52169ffd4ec6a54a789ee4a6173fe84aca0ef8dedaa46b1f93c"
 }
--- a/backend/migrations/20260215190000_instance_theme.sql
+++ b/backend/migrations/20260215190000_instance_theme.sql
@ -0,0 +1,2 @@
+ALTER TABLE instance_settings
+ADD COLUMN IF NOT EXISTS theme_id VARCHAR(50) NOT NULL DEFAULT 'neutral';
--- a/backend/migrations_demo/20260215193500_demo_default_theme.sql
+++ b/backend/migrations_demo/20260215193500_demo_default_theme.sql
@ -0,0 +1,3 @@
+UPDATE instance_settings
+SET theme_id = 'breeze-dark'
+WHERE theme_id = 'neutral';
--- a/backend/src/api/demo.rs
+++ b/backend/src/api/demo.rs
@ -40,7 +40,7 @@ async fn get_demo_status(State(state): State<DemoState>) -> impl IntoResponse {
            vec![
                "Cannot delete communities",
                "Cannot delete users",
-                "Cannot modify instance settings",
+                "Cannot modify instance settings (except instance theme)",
                "Data resets periodically"
            ]
        } else {
--- a/backend/src/api/settings.rs
+++ b/backend/src/api/settings.rs
@ -30,6 +30,7 @@ pub struct SetupStatus {
 pub struct PublicInstanceSettings {
    pub setup_completed: bool,
    pub instance_name: String,
+    pub theme_id: String,
    pub platform_mode: String,
    pub registration_enabled: bool,
    pub registration_mode: String,
@ -42,6 +43,7 @@ pub struct InstanceSettings {
    pub id: Uuid,
    pub setup_completed: bool,
    pub instance_name: String,
+    pub theme_id: String,
    pub platform_mode: String,
    pub registration_enabled: bool,
    pub registration_mode: String,
@ -64,6 +66,8 @@ pub struct UpdateInstanceRequest {
    #[serde(default)]
    pub instance_name: Option<String>,
    #[serde(default)]
+    pub theme_id: Option<String>,
+    #[serde(default)]
    pub platform_mode: Option<String>,
    #[serde(default)]
    pub registration_enabled: Option<bool>,
@ -71,6 +75,32 @@ pub struct UpdateInstanceRequest {
    pub registration_mode: Option<String>,
 }

+const KNOWN_THEME_IDS: [&str; 4] = ["neutral", "breeze-light", "breeze-dark", "opensuse"];
+
+fn validate_theme_id(theme_id: &str) -> Result<(), (StatusCode, String)> {
+    if theme_id.trim().is_empty() {
+        return Err((StatusCode::BAD_REQUEST, "Theme cannot be empty".to_string()));
+    }
+    if theme_id.len() > 50 {
+        return Err((StatusCode::BAD_REQUEST, "Theme is too long".to_string()));
+    }
+    if !theme_id
+        .chars()
+        .all(|c| c.is_ascii_lowercase() || c.is_ascii_digit() || c == '-')
+    {
+        return Err((
+            StatusCode::BAD_REQUEST,
+            "Theme contains invalid characters".to_string(),
+        ));
+    }
+
+    if !KNOWN_THEME_IDS.iter().any(|t| t == &theme_id) {
+        return Err((StatusCode::BAD_REQUEST, "Unknown theme".to_string()));
+    }
+
+    Ok(())
+}
+
 #[derive(Debug, Serialize)]
 pub struct CommunitySettings {
    pub community_id: Uuid,
@ -121,7 +151,7 @@ async fn get_public_settings(
    State(pool): State<PgPool>,
 ) -> Result<Json<PublicInstanceSettings>, String> {
    let row = sqlx::query!(
-        r#"SELECT setup_completed, instance_name, platform_mode,
+        r#"SELECT setup_completed, instance_name, theme_id, platform_mode,
                  registration_enabled, registration_mode,
                  single_community_id
           FROM instance_settings
@ -135,6 +165,7 @@ async fn get_public_settings(
        return Ok(Json(PublicInstanceSettings {
            setup_completed: false,
            instance_name: "Likwid".to_string(),
+            theme_id: "neutral".to_string(),
            platform_mode: "open".to_string(),
            registration_enabled: true,
            registration_mode: "open".to_string(),
@ -161,6 +192,7 @@ async fn get_public_settings(
    Ok(Json(PublicInstanceSettings {
        setup_completed: r.setup_completed,
        instance_name: r.instance_name,
+        theme_id: r.theme_id,
        platform_mode: r.platform_mode,
        registration_enabled: r.registration_enabled,
        registration_mode: r.registration_mode,
@ -224,6 +256,7 @@ async fn complete_setup(
            platform_mode = $3,
            single_community_id = $4
           RETURNING id, setup_completed, instance_name, platform_mode,
+                     theme_id,
                     registration_enabled, registration_mode,
                     default_community_visibility, allow_private_communities,
                     default_plugin_policy, default_moderation_mode"#,
@ -240,6 +273,7 @@ async fn complete_setup(
        id: settings.id,
        setup_completed: settings.setup_completed,
        instance_name: settings.instance_name,
+        theme_id: settings.theme_id,
        platform_mode: settings.platform_mode,
        registration_enabled: settings.registration_enabled,
        registration_mode: settings.registration_mode,
@ -260,7 +294,7 @@ async fn get_instance_settings(

    let s = sqlx::query!(
        r#"SELECT id, setup_completed, instance_name, platform_mode,
-                  registration_enabled, registration_mode,
+                  theme_id, registration_enabled, registration_mode,
                  default_community_visibility, allow_private_communities,
                  default_plugin_policy, default_moderation_mode
           FROM instance_settings LIMIT 1"#
@ -273,6 +307,7 @@ async fn get_instance_settings(
        id: s.id,
        setup_completed: s.setup_completed,
        instance_name: s.instance_name,
+        theme_id: s.theme_id,
        platform_mode: s.platform_mode,
        registration_enabled: s.registration_enabled,
        registration_mode: s.registration_mode,
@ -293,24 +328,37 @@ async fn update_instance_settings(
    // Check platform settings permission
    require_permission(&pool, auth.user_id, perms::PLATFORM_SETTINGS, None).await?;

+    if let Some(theme_id) = req.theme_id.as_deref() {
+        validate_theme_id(theme_id)?;
+    }
+
    if config.is_demo() {
+        let allowed = req.theme_id.is_some()
+            && req.instance_name.is_none()
+            && req.platform_mode.is_none()
+            && req.registration_enabled.is_none()
+            && req.registration_mode.is_none();
+        if !allowed {
            return Err((
                StatusCode::FORBIDDEN,
-            "Instance settings cannot be modified in demo mode".to_string(),
+                "Only theme updates are allowed in demo mode".to_string(),
            ));
        }
+    }

    let s = sqlx::query!(
        r#"UPDATE instance_settings SET
            instance_name = COALESCE($1, instance_name),
-            platform_mode = COALESCE($2, platform_mode),
-            registration_enabled = COALESCE($3, registration_enabled),
-            registration_mode = COALESCE($4, registration_mode)
+            theme_id = COALESCE($2, theme_id),
+            platform_mode = COALESCE($3, platform_mode),
+            registration_enabled = COALESCE($4, registration_enabled),
+            registration_mode = COALESCE($5, registration_mode)
           RETURNING id, setup_completed, instance_name, platform_mode,
-                     registration_enabled, registration_mode,
+                     theme_id, registration_enabled, registration_mode,
                     default_community_visibility, allow_private_communities,
                     default_plugin_policy, default_moderation_mode"#,
        req.instance_name,
+        req.theme_id,
        req.platform_mode,
        req.registration_enabled,
        req.registration_mode
@ -323,6 +371,7 @@ async fn update_instance_settings(
        id: s.id,
        setup_completed: s.setup_completed,
        instance_name: s.instance_name,
+        theme_id: s.theme_id,
        platform_mode: s.platform_mode,
        registration_enabled: s.registration_enabled,
        registration_mode: s.registration_mode,
--- a/compose/demo.yml
+++ b/compose/demo.yml
@ -1,6 +1,6 @@
 # Demo deployment - includes demo users, seed data, and restricted actions
-# Usage: podman-compose --env-file compose/.env.demo -f compose/demo.yml up -d
-# Reset: podman-compose --env-file compose/.env.demo -f compose/demo.yml down -v; podman-compose --env-file compose/.env.demo -f compose/demo.yml up -d
+# Usage: podman compose --env-file compose/.env.demo -f compose/demo.yml up -d
+# Reset: podman compose --env-file compose/.env.demo -f compose/demo.yml down -v; podman compose --env-file compose/.env.demo -f compose/demo.yml up -d

 services:
  postgres:
--- a/compose/production.yml
+++ b/compose/production.yml
@ -1,5 +1,5 @@
 # Production deployment - clean instance without demo data
-# Usage: podman-compose -f compose/production.yml up -d
+# Usage: podman compose -f compose/production.yml up -d

 services:
  postgres:
--- a/docs/admin/backup.md
+++ b/docs/admin/backup.md
@ -49,7 +49,7 @@ find "$BACKUP_DIR" -name "*.dump.gz" -mtime +$RETENTION_DAYS -delete
 ### Containerized Backup

 ```bash
-# If using podman-compose
+# If using podman compose
 podman exec likwid-prod-db pg_dump -U likwid likwid_prod > backup.sql
 ```

--- a/docs/admin/configuration.md
+++ b/docs/admin/configuration.md
@ -37,7 +37,7 @@ Managed via the Admin panel or API:
 - **Instance Name** - Display name for your Likwid instance
 - **Instance Description** - Brief description
 - **Registration** - Open, invite-only, or closed
- **Email Verification** - Required or optional
+- **Approval workflows** - Registration and community creation can be open, invite-only, or require admin approval

 ### Features

--- a/docs/admin/installation.md
+++ b/docs/admin/installation.md
@ -34,7 +34,7 @@ Required settings:

 ```bash
 cd compose
-podman-compose --env-file .env.production -f production.yml up -d
+podman compose --env-file .env.production -f production.yml up -d
 ```

 ### 4. Access
--- a/docs/user/getting-started.md
+++ b/docs/user/getting-started.md
@ -11,7 +11,7 @@ Likwid is a modular governance platform for distributed organizations. This guid
   - Email address
   - Display name (shown to others)
   - Password
-4. Verify your email if required by the instance
+4. If registration requires approval, your account will be pending until an admin approves it

 ## Exploring Without an Account

--- a/frontend/src/layouts/Layout.astro
+++ b/frontend/src/layouts/Layout.astro
@ -4,7 +4,7 @@ interface Props {
 }

 import { DEFAULT_THEME, themes as themeRegistry } from '../lib/themes';
-import { API_BASE as apiBase } from '../lib/api';
+import { API_BASE as apiBase, SERVER_API_BASE } from '../lib/api';
 import VotingIcons from '../components/icons/VotingIcons.astro';
 import DesignSystemStyles from '../components/ui/DesignSystemStyles.astro';

@ -22,11 +22,24 @@ const publicDemoSite = isEnabled((globalThis as any).process?.env?.PUBLIC_DEMO_S
   Object.entries(themeRegistry).map(([id, t]) => [id, { isDark: t.isDark, colors: t.colors }]),
 );

- const defaultTheme = DEFAULT_THEME;
+ const settingsApiBase = SERVER_API_BASE || 'http://127.0.0.1:3000';
+
+ let defaultTheme = DEFAULT_THEME;
+ try {
+   const res = await fetch(`${settingsApiBase}/api/settings/public`);
+   if (res.ok) {
+     const settings = await res.json();
+     if (settings && typeof settings.theme_id === 'string' && themeRegistry[settings.theme_id]) {
+       defaultTheme = settings.theme_id;
+     }
+   }
+ } catch (_e) {}
+
+ const initialTheme = themeRegistry[defaultTheme] || themeRegistry[DEFAULT_THEME];
 ---

 <!doctype html>
-<html lang="en" data-theme="neutral" data-theme-mode="dark">
+<html lang="en" data-theme={defaultTheme} data-theme-mode={initialTheme.isDark ? 'dark' : 'light'}>
  <head>
    <meta charset="UTF-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
@ -36,9 +49,9 @@ const publicDemoSite = isEnabled((globalThis as any).process?.env?.PUBLIC_DEMO_S
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet" />
    <title>{title} | Likwid</title>
-    <script is:inline define:vars={{ themes, defaultTheme }}>
+    <script is:inline define:vars={{ themes, defaultTheme, publicDemoSite }}>
      (function() {
-        const saved = localStorage.getItem('likwid-theme') || defaultTheme;
+        const saved = publicDemoSite ? defaultTheme : (localStorage.getItem('likwid-theme') || defaultTheme);
        const theme = themes[saved] || themes[defaultTheme];
        const root = document.documentElement;
        const c = theme.colors;
--- a/frontend/src/layouts/PublicLayout.astro
+++ b/frontend/src/layouts/PublicLayout.astro
@ -5,6 +5,7 @@ interface Props {
 }

 import { DEFAULT_THEME, themes as themeRegistry } from '../lib/themes';
+import { SERVER_API_BASE } from '../lib/api';
 import DesignSystemStyles from '../components/ui/DesignSystemStyles.astro';

 function isEnabled(v: string | undefined): boolean {
@ -21,11 +22,24 @@ const themes = Object.fromEntries(
  Object.entries(themeRegistry).map(([id, t]) => [id, { isDark: t.isDark, colors: t.colors }]),
 );

-const defaultTheme = DEFAULT_THEME;
+const settingsApiBase = SERVER_API_BASE || 'http://127.0.0.1:3000';
+
+let defaultTheme = DEFAULT_THEME;
+try {
+  const res = await fetch(`${settingsApiBase}/api/settings/public`);
+  if (res.ok) {
+    const settings = await res.json();
+    if (settings && typeof settings.theme_id === 'string' && themeRegistry[settings.theme_id]) {
+      defaultTheme = settings.theme_id;
+    }
+  }
+} catch (_e) {}
+
+const initialTheme = themeRegistry[defaultTheme] || themeRegistry[DEFAULT_THEME];
 ---

 <!doctype html>
-<html lang="en" data-theme="neutral" data-theme-mode="dark">
+<html lang="en" data-theme={defaultTheme} data-theme-mode={initialTheme.isDark ? 'dark' : 'light'}>
  <head>
    <meta charset="UTF-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
@ -35,9 +49,9 @@ const defaultTheme = DEFAULT_THEME;
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet" />
    <title>{title} | Likwid</title>
-    <script is:inline define:vars={{ themes, defaultTheme }}>
+    <script is:inline define:vars={{ themes, defaultTheme, publicDemoSite }}>
      (function() {
-        const saved = localStorage.getItem('likwid-theme') || defaultTheme;
+        const saved = publicDemoSite ? defaultTheme : (localStorage.getItem('likwid-theme') || defaultTheme);
        const theme = themes[saved] || themes[defaultTheme];
        const root = document.documentElement;
        const c = theme.colors;
@ -103,11 +117,6 @@ const defaultTheme = DEFAULT_THEME;
              <a href="/docs">Documentation</a>
            </div>
            <div class="nav-actions">
-              <select id="theme-select" class="theme-select" aria-label="Theme">
-                {Object.values(themeRegistry).map((t) => (
-                  <option value={t.id}>{t.name}</option>
-                ))}
-              </select>
              <a href="/demo" class="ui-btn ui-btn-primary">Explore Demo</a>
              {!publicDemoSite ? <a href="/login" class="ui-btn ui-btn-secondary">Sign In</a> : null}
            </div>
@ -154,10 +163,9 @@ const defaultTheme = DEFAULT_THEME;
        </div>
      </footer>
    </div>
-    <script is:inline define:vars={{ themes, defaultTheme }}>
+    <script is:inline define:vars={{ themes, defaultTheme, publicDemoSite }}>
      const nav = document.getElementById('public-nav');
      const toggle = document.getElementById('public-nav-toggle');
-      const themeSelect = document.getElementById('theme-select');

      function openNav() {
        if (!nav || !toggle) return;
@ -239,58 +247,6 @@ const defaultTheme = DEFAULT_THEME;
          }
        });
      }
-
-      function applySelectedTheme() {
-        if (!(themeSelect instanceof HTMLSelectElement)) return;
-        const selected = themeSelect.value || defaultTheme;
-        const theme = themes[selected] || themes[defaultTheme];
-        const root = document.documentElement;
-        const c = theme.colors;
-        root.style.setProperty('--color-bg', c.bg);
-        root.style.setProperty('--color-bg-alt', c.bgAlt);
-        root.style.setProperty('--color-surface', c.surface);
-        root.style.setProperty('--color-surface-hover', c.surfaceHover);
-        root.style.setProperty('--color-border', c.border);
-        root.style.setProperty('--color-border-hover', c.borderHover);
-        root.style.setProperty('--color-text', c.text);
-        root.style.setProperty('--color-text-muted', c.textMuted);
-        root.style.setProperty('--color-text-inverse', c.textInverse);
-        root.style.setProperty('--color-primary', c.primary);
-        root.style.setProperty('--color-primary-hover', c.primaryHover);
-        root.style.setProperty('--color-primary-muted', c.primaryMuted);
-        root.style.setProperty('--color-secondary', c.secondary);
-        root.style.setProperty('--color-secondary-hover', c.secondaryHover);
-        root.style.setProperty('--color-info', c.info);
-        root.style.setProperty('--color-info-hover', c.infoHover);
-        root.style.setProperty('--color-info-muted', c.infoMuted);
-        root.style.setProperty('--color-neutral', c.neutral);
-        root.style.setProperty('--color-neutral-hover', c.neutralHover);
-        root.style.setProperty('--color-neutral-muted', c.neutralMuted);
-        root.style.setProperty('--color-success', c.success);
-        root.style.setProperty('--color-success-muted', c.successMuted);
-        root.style.setProperty('--color-success-hover', c.successHover);
-        root.style.setProperty('--color-warning', c.warning);
-        root.style.setProperty('--color-warning-muted', c.warningMuted);
-        root.style.setProperty('--color-error', c.error);
-        root.style.setProperty('--color-error-muted', c.errorMuted);
-        root.style.setProperty('--color-error-hover', c.errorHover);
-        root.style.setProperty('--color-link', c.link);
-        root.style.setProperty('--color-link-visited', c.linkVisited);
-        root.style.setProperty('--color-overlay', c.overlay);
-        root.style.setProperty('--color-field-bg', c.fieldBg);
-        root.style.setProperty('--color-on-primary', c.onPrimary);
-        root.setAttribute('data-theme', selected);
-        root.setAttribute('data-theme-mode', theme.isDark ? 'dark' : 'light');
-      }
-
-      if (themeSelect instanceof HTMLSelectElement) {
-        const saved = localStorage.getItem('likwid-theme') || defaultTheme;
-        themeSelect.value = themes[saved] ? saved : defaultTheme;
-        themeSelect.addEventListener('change', () => {
-          localStorage.setItem('likwid-theme', themeSelect.value);
-          applySelectedTheme();
-        });
-      }
    </script>
  </body>
 </html>
@ -449,20 +405,6 @@ const defaultTheme = DEFAULT_THEME;
    align-items: center;
  }

-  .theme-select {
-    width: auto;
-    padding: 0.5rem 0.75rem;
-    font-size: 0.875rem;
-    background: rgba(255, 255, 255, 0.06);
-    border: 1px solid var(--color-border);
-    border-radius: var(--radius-sm);
-    color: var(--color-text);
-  }
-
-  .theme-select:hover {
-    border-color: var(--color-border-hover);
-  }
-
  .public-main {
    flex: 1;
  }
--- a/frontend/src/pages/admin/settings.astro
+++ b/frontend/src/pages/admin/settings.astro
@ -29,6 +29,16 @@ import { API_BASE as apiBase } from '../../lib/api';
            <label for="instance_name">Platform Name</label>
            <input type="text" id="instance_name" name="instance_name" />
          </div>
+
+          <div class="form-group">
+            <label for="theme_id">Theme</label>
+            <select id="theme_id" name="theme_id">
+              <option value="neutral">Neutral Dark</option>
+              <option value="breeze-light">Breeze Light</option>
+              <option value="breeze-dark">Breeze Dark</option>
+              <option value="opensuse">openSUSE</option>
+            </select>
+          </div>
        </section>

        <!-- Platform Mode -->
@ -182,6 +192,8 @@ import { API_BASE as apiBase } from '../../lib/api';
    const saveBtn = document.getElementById('save-btn');
    const saveStatus = document.getElementById('save-status');

+    let initialSettings = null;
+
    if (!form || !loadingEl || !errorEl || !saveStatus) return;

  async function loadSettings() {
@ -213,9 +225,11 @@ import { API_BASE as apiBase } from '../../lib/api';
      }

      const settings = await res.json();
+      initialSettings = settings;
      
      // Populate form
      (document.getElementById('instance_name')).value = settings.instance_name;
+      (document.getElementById('theme_id')).value = settings.theme_id || 'neutral';
      (document.getElementById('platform_mode')).value = settings.platform_mode;
      (document.getElementById('registration_enabled')).checked = settings.registration_enabled;
      (document.getElementById('registration_mode')).value = settings.registration_mode;
@ -240,14 +254,39 @@ import { API_BASE as apiBase } from '../../lib/api';

    if (saveBtn) saveBtn.disabled = true;
    saveStatus.textContent = 'Saving...';
+    saveStatus.style.color = '';

-    const data = {
+    const current = {
      instance_name: (document.getElementById('instance_name')).value,
+      theme_id: (document.getElementById('theme_id')).value,
      platform_mode: (document.getElementById('platform_mode')).value,
      registration_enabled: (document.getElementById('registration_enabled')).checked,
-      registration_mode: (document.getElementById('registration_mode')).value
+      registration_mode: (document.getElementById('registration_mode')).value,
    };

+    const data = {};
+    if (!initialSettings || current.instance_name !== initialSettings.instance_name) {
+      data.instance_name = current.instance_name;
+    }
+    if (!initialSettings || current.theme_id !== initialSettings.theme_id) {
+      data.theme_id = current.theme_id;
+    }
+    if (!initialSettings || current.platform_mode !== initialSettings.platform_mode) {
+      data.platform_mode = current.platform_mode;
+    }
+    if (!initialSettings || current.registration_enabled !== initialSettings.registration_enabled) {
+      data.registration_enabled = current.registration_enabled;
+    }
+    if (!initialSettings || current.registration_mode !== initialSettings.registration_mode) {
+      data.registration_mode = current.registration_mode;
+    }
+
+    if (Object.keys(data).length === 0) {
+      saveStatus.textContent = 'No changes to save.';
+      if (saveBtn) saveBtn.disabled = false;
+      return;
+    }
+
    try {
      const res = await fetch(`${API_BASE}/api/settings/instance`, {
        method: 'PATCH',
@ -262,8 +301,17 @@ import { API_BASE as apiBase } from '../../lib/api';
        throw new Error(await res.text());
      }

+      const updated = await res.json();
+      initialSettings = updated;
+
      saveStatus.textContent = 'Saved!';
      setTimeout(() => { saveStatus.textContent = ''; }, 3000);
+
+      if (data.theme_id) {
+        setTimeout(() => {
+          window.location.reload();
+        }, 150);
+      }
    } catch (err) {
      saveStatus.textContent = 'Error: ' + err.message;
      saveStatus.style.color = '#c62828';
--- a/frontend/src/pages/settings.astro
+++ b/frontend/src/pages/settings.astro
@ -1,6 +1,14 @@
 ---
 import Layout from '../layouts/Layout.astro';
 import { API_BASE as apiBase } from '../lib/api';
+
+function isEnabled(v: string | undefined): boolean {
+  if (!v) return false;
+  const n = v.trim().toLowerCase();
+  return n === '1' || n === 'true' || n === 'yes' || n === 'on';
+}
+
+const publicDemoSite = isEnabled((globalThis as any).process?.env?.PUBLIC_DEMO_SITE);
 ---

 <Layout title="Settings">
@ -13,7 +21,7 @@ import { API_BASE as apiBase } from '../lib/api';
  </section>
 </Layout>

-<script define:vars={{ apiBase }}>
+<script define:vars={{ apiBase, publicDemoSite }}>
  import { getAllThemes, loadSavedTheme, saveTheme } from '../lib/themes';

  const token = localStorage.getItem('token');
@ -42,6 +50,15 @@ import { API_BASE as apiBase } from '../lib/api';

      const user = await res.json();

+      let appearanceHtml = '';
+      if (publicDemoSite) {
+        appearanceHtml = `
+          <div class="form-section ui-card ui-card-pad-lg ui-form">
+            <h2>Appearance</h2>
+            <p class="hint">On the public demo, appearance is managed by the instance administrator.</p>
+          </div>
+        `;
+      } else {
        const currentTheme = loadSavedTheme();
        const themeOptions = getAllThemes()
          .map((t) => {
@ -50,7 +67,7 @@ import { API_BASE as apiBase } from '../lib/api';
          })
          .join('');

-      container.innerHTML = `
+        appearanceHtml = `
          <div class="form-section ui-card ui-card-pad-lg ui-form">
            <h2>Appearance</h2>
            
@ -72,6 +89,11 @@ import { API_BASE as apiBase } from '../lib/api';
              </div>
            </div>
          </div>
+        `;
+      }
+
+      container.innerHTML = `
+        ${appearanceHtml}

        <form id="profile-form" class="settings-form">
          <div class="form-section ui-card ui-card-pad-lg ui-form">
@ -99,7 +121,9 @@ import { API_BASE as apiBase } from '../lib/api';
        </div>
      `;

+      if (!publicDemoSite) {
        setupThemeSwitcher();
+      }

      document.getElementById('profile-form')?.addEventListener('submit', async (e) => {
        e.preventDefault();
@ -148,6 +172,8 @@ import { API_BASE as apiBase } from '../lib/api';
  }

  function setupThemeSwitcher() {
+    if (publicDemoSite) return;
+
    function updatePreview() {
      const previewBg = document.querySelector('.preview-bg');
      const previewSurface = document.querySelector('.preview-surface');
--- a/scripts/demo-reset.ps1
+++ b/scripts/demo-reset.ps1
@ -29,10 +29,10 @@ if (Test-Path $envFile) {
 }

 Write-Host "`n[1/3] Stopping demo containers and removing volumes..." -ForegroundColor Yellow
-podman-compose @composeArgs down --remove-orphans -v
+podman compose @composeArgs down --remove-orphans -v

 Write-Host "`n[2/3] Starting fresh demo instance..." -ForegroundColor Yellow
-podman-compose @composeArgs up -d
+podman compose @composeArgs up -d

 Write-Host "`n[3/3] Waiting for services to be ready..." -ForegroundColor Yellow
 Start-Sleep -Seconds 10
@ -63,4 +63,4 @@ while ($retry -lt $maxRetries) {

 Write-Host "`nWarning: Backend health check timed out. Check logs with:" -ForegroundColor Yellow
 $composeArgsText = ($composeArgs -join ' ')
-Write-Host "  podman-compose $composeArgsText logs backend"
+Write-Host "  podman compose $composeArgsText logs backend"
--- a/scripts/demo-reset.sh
+++ b/scripts/demo-reset.sh
@ -26,10 +26,10 @@ if [ "$1" != "--force" ] && [ "$1" != "-f" ]; then
 fi

 echo -e "\n[1/3] Stopping demo containers and removing volumes..."
-podman-compose "${COMPOSE_ARGS[@]}" down --remove-orphans -v || docker-compose "${COMPOSE_ARGS[@]}" down --remove-orphans -v
+podman compose "${COMPOSE_ARGS[@]}" down --remove-orphans -v || podman-compose "${COMPOSE_ARGS[@]}" down --remove-orphans -v || docker-compose "${COMPOSE_ARGS[@]}" down --remove-orphans -v

 echo -e "\n[2/3] Starting fresh demo instance..."
-podman-compose "${COMPOSE_ARGS[@]}" up -d || docker-compose "${COMPOSE_ARGS[@]}" up -d
+podman compose "${COMPOSE_ARGS[@]}" up -d || podman-compose "${COMPOSE_ARGS[@]}" up -d || docker-compose "${COMPOSE_ARGS[@]}" up -d

 echo -e "\n[3/3] Waiting for services to be ready..."
 sleep 5
@ -54,5 +54,5 @@ while [ $retry -lt $max_retries ]; do
 done

 echo -e "\nWarning: Backend health check timed out. Check logs with:"
-echo "  podman-compose ${COMPOSE_ARGS[*]} logs backend"
+echo "  podman compose ${COMPOSE_ARGS[*]} logs backend"
 echo "  docker-compose ${COMPOSE_ARGS[*]} logs backend"
--- a/scripts/dev-start.ps1
+++ b/scripts/dev-start.ps1
@ -27,19 +27,19 @@ function Invoke-Compose {
        [Parameter(Mandatory=$true)][string[]]$Args
    )

-    $podmanCompose = Get-Command podman-compose -ErrorAction SilentlyContinue
-    if ($podmanCompose) {
-        $null = & podman-compose @Args
-        return $LASTEXITCODE
-    }
-
    $podman = Get-Command podman -ErrorAction SilentlyContinue
    if ($podman) {
        $null = & podman compose @Args
        return $LASTEXITCODE
    }

-    throw 'Neither podman-compose nor podman was found in PATH.'
+    $podmanCompose = Get-Command podman-compose -ErrorAction SilentlyContinue
+    if ($podmanCompose) {
+        $null = & podman-compose @Args
+        return $LASTEXITCODE
+    }
+
+    throw 'Neither podman nor podman-compose was found in PATH.'
 }

 function Get-CommandLine {
--- a/scripts/dev-start.sh
+++ b/scripts/dev-start.sh
@ -30,7 +30,7 @@ fi

 # Start PostgreSQL
 echo "Starting PostgreSQL..."
-podman-compose -f "$ROOT_DIR/compose/dev.yml" up -d 2>/dev/null || true
+podman compose -f "$ROOT_DIR/compose/dev.yml" up -d 2>/dev/null || podman-compose -f "$ROOT_DIR/compose/dev.yml" up -d 2>/dev/null || true

 # Wait for PostgreSQL
 echo "Waiting for PostgreSQL..."
--- a/scripts/dev-stop.ps1
+++ b/scripts/dev-stop.ps1
@ -19,19 +19,19 @@ function Invoke-Compose {
        [Parameter(Mandatory=$true)][string[]]$Args
    )

-    $podmanCompose = Get-Command podman-compose -ErrorAction SilentlyContinue
-    if ($podmanCompose) {
-        $null = & podman-compose @Args
-        return $LASTEXITCODE
-    }
-
    $podman = Get-Command podman -ErrorAction SilentlyContinue
    if ($podman) {
        $null = & podman compose @Args
        return $LASTEXITCODE
    }

-    throw 'Neither podman-compose nor podman was found in PATH.'
+    $podmanCompose = Get-Command podman-compose -ErrorAction SilentlyContinue
+    if ($podmanCompose) {
+        $null = & podman-compose @Args
+        return $LASTEXITCODE
+    }
+
+    throw 'Neither podman nor podman-compose was found in PATH.'
 }

 function Get-CommandLine {
--- a/scripts/dev-stop.sh
+++ b/scripts/dev-stop.sh
@ -48,7 +48,7 @@ pkill -f "astro dev" 2>/dev/null || true
 # Stop PostgreSQL if requested
 if [ "$STOP_DB" = "--all" ] || [ "$STOP_DB" = "-a" ]; then
    echo "Stopping PostgreSQL..."
-    podman-compose -f "$ROOT_DIR/compose/dev.yml" down 2>/dev/null || true
+    podman compose -f "$ROOT_DIR/compose/dev.yml" down 2>/dev/null || podman-compose -f "$ROOT_DIR/compose/dev.yml" down 2>/dev/null || true
 fi

 echo "Done."
--- a/scripts/dev.ps1
+++ b/scripts/dev.ps1
@ -1 +1,4 @@
-podman-compose -f compose/dev.yml up
+podman compose -f compose/dev.yml up
+if ($LASTEXITCODE -ne 0) {
+    podman-compose -f compose/dev.yml up
+}
--- a/scripts/dev.sh
+++ b/scripts/dev.sh
@ -1,2 +1,2 @@
 #!/bin/sh
-podman-compose -f compose/dev.yml up
+podman compose -f compose/dev.yml up || podman-compose -f compose/dev.yml up
--- a/scripts/post-reboot-setup.ps1
+++ b/scripts/post-reboot-setup.ps1
@ -5,7 +5,7 @@ Write-Host "=== Likwid Post-Reboot Setup ===" -ForegroundColor Cyan

 # Step 1: Verify WSL2 is working
 Write-Host "`n[1/4] Checking WSL2 status..." -ForegroundColor Yellow
-$wslStatus = wsl --status 2>&1
+wsl --status 2>&1 | Out-Null
 if ($LASTEXITCODE -ne 0) {
    Write-Host "WSL2 is not ready. Please ensure virtualization is enabled in BIOS." -ForegroundColor Red
    Write-Host "Run 'wsl --install --no-distribution' as administrator if needed." -ForegroundColor Red
@ -35,7 +35,7 @@ wsl --set-default openSUSE-Tumbleweed
 # Step 4: Configure Podman in WSL2
 Write-Host "`n[4/4] Configuring Podman in openSUSE Tumbleweed..." -ForegroundColor Yellow
 wsl -d openSUSE-Tumbleweed -e bash -c "
-    echo 'Installing Podman and podman-compose...'
+    echo 'Installing Podman and compose support (use: podman compose)'
    sudo zypper refresh
    sudo zypper install -y podman podman-compose
    
@ -44,7 +44,7 @@ wsl -d openSUSE-Tumbleweed -e bash -c "
    
    echo 'Verifying installation...'
    podman --version
-    podman-compose --version
+    podman compose --help >/dev/null 2>&1 || true
 "

 Write-Host "`n=== Setup Complete ===" -ForegroundColor Cyan
--- a/scripts/prepare-production.ps1
+++ b/scripts/prepare-production.ps1
@ -28,4 +28,4 @@ if (Test-Path $demoMigration) {
 Write-Host "`n=== Production Preparation Complete ===" -ForegroundColor Green
 Write-Host "`nNext steps:"
 Write-Host "  1. Configure compose/.env.production"
-Write-Host "  2. Run: podman-compose -f compose/production.yml up -d"
+Write-Host "  2. Run: podman compose -f compose/production.yml up -d"
Author	SHA1	Message	Date
Marco Allegretti	9de222620c	chore(demo): default theme breeze-dark	2026-02-15 20:52:39 +01:00
Marco Allegretti	c49feb726f	chore(demo): clarify theme exception	2026-02-15 20:39:03 +01:00
Marco Allegretti	3e14fe7326	feat(settings): instance theme	2026-02-15 20:07:55 +01:00
Marco Allegretti	c8e90fccbf	fix(demo): remove public theme switching	2026-02-15 17:06:01 +01:00
Marco Allegretti	3b1f8aa177	docs(ops): standardize on podman compose	2026-02-15 16:55:57 +01:00