feat(template): add code-server service with Python-ready defaults and CI checks

- add code-server Docker stage with standalone install and extension bootstrap
- add code-server service to compose.yaml with env-driven host/port/auth
- add .vscode/settings.json.dist and .vscode/extensions.json.dist for Python workflow
- include code-server build/smoke check in GitHub CI
- document code-server setup and env vars in README
- update ignore rules to keep local .vscode/*.json untracked while
  allowing dist files in build context

Author: jamm1985

.dockerignore

@@ -15,4 +15,6 @@ build/
 .env
 .DS_Store
 .idea/
-.vscode/
+.vscode/*
+!.vscode/settings.json.dist
+!.vscode/extensions.json.dist

.env.dist

@@ -11,6 +11,7 @@ DOCKER_PLATFORM=linux/amd64
 MIRROR_LIST_COUNTRY=RU
 BUILD_PACKAGES="pyenv git gnupg sudo postgresql-libs mariadb-libs openmp"
 VIM_PACKAGES="python vim vim-spell-en vim-spell-ru ctags ripgrep bat npm nodejs-lts-jod openai-codex gemini-cli"
+CODE_SERVER_EXTENSIONS="ms-python.python ms-pyright.pyright charliermarsh.ruff ms-toolsai.jupyter"
 
 PYTHON_VERSION=3.14
 PYTHONUNBUFFERED=1
@@ -20,7 +21,12 @@ POETRY_OPTIONS_APP="--only main --compile"
 POETRY_OPTIONS_DEV="--no-root --with dev --compile"
 POETRY_NO_INTERACTION=1
 
+CODE_SERVER_HOST=0.0.0.0
+CODE_SERVER_PORT=8443
+CODE_SERVER_AUTH=password
+
 # Secrets: keep in local .env only; never paste them into logs/issues.
 JUPYTER_TOKEN=change_me_to_a_strong_random_token
+CODE_SERVER_PASSWORD=change_me_to_a_strong_random_password
 OPENAI_API_KEY=
 GEMINI_API_KEY=

.github/workflows/ci.yml

@@ -36,7 +36,7 @@ jobs:
         uses: docker/setup-buildx-action@v3
 
       - name: Build images
-        run: docker compose build dev app vim-ide codex gemini jupyterlab
+        run: docker compose build dev app vim-ide codex gemini jupyterlab code-server
 
       - name: Check Vim
         run: docker compose run --rm -T vim-ide --version
@@ -50,6 +50,9 @@ jobs:
       - name: Check JupyterLab
         run: docker compose run --rm -T jupyterlab --version
 
+      - name: Check code-server
+        run: docker compose run --rm -T code-server --version
+
       - name: Run app smoke test
         run: docker compose run --rm -T app
 

.gitignore

@@ -2,6 +2,8 @@
 .coc-settings.json
 .env
 .vimrc
+.vscode/settings.json
+.vscode/extensions.json
 
 # jupyter
 .ipynb_checkpoints/

.vscode/extensions.json.dist

@@ -0,0 +1,8 @@
+{
+  "recommendations": [
+    "ms-python.python",
+    "ms-pyright.pyright",
+    "charliermarsh.ruff",
+    "ms-toolsai.jupyter"
+  ]
+}

.vscode/settings.json.dist

@@ -0,0 +1,19 @@
+{
+  "python.defaultInterpreterPath": "/opt/venv/bin/python",
+  "python.testing.pytestEnabled": true,
+  "python.testing.unittestEnabled": false,
+  "python.testing.pytestArgs": [
+    "tests"
+  ],
+  "python.analysis.typeCheckingMode": "basic",
+  "editor.formatOnSave": true,
+  "editor.codeActionsOnSave": {
+    "source.fixAll.ruff": "explicit",
+    "source.organizeImports.ruff": "explicit"
+  },
+  "[python]": {
+    "editor.defaultFormatter": "charliermarsh.ruff"
+  },
+  "ruff.nativeServer": "on",
+  "ruff.organizeImports": true
+}

Dockerfile

@@ -141,3 +141,30 @@ COPY --chown=$DOCKER_USER:$DOCKER_USER .coc-settings.json \
 RUN git config --global --add safe.directory /application
 ENV TERM=xterm-256color
 WORKDIR /application
+
+FROM build-deps-dev AS code-server
+ARG DOCKER_HOST_UID=1000
+ARG DOCKER_HOST_GID=1000
+ARG DOCKER_USER=developer
+ARG DOCKER_USER_HOME=/home/developer
+ARG CODE_SERVER_EXTENSIONS="ms-python.python ms-pyright.pyright charliermarsh.ruff ms-toolsai.jupyter"
+RUN set -eux; \
+  for attempt in 1 2 3; do \
+    curl -fsSL https://code-server.dev/install.sh \
+      | sh -s -- --method standalone --prefix /usr/local \
+      && break; \
+    [ "$attempt" -eq 3 ] && exit 1; \
+    sleep 5; \
+  done
+RUN /usr/local/bin/code-server --version
+RUN mkdir -p $DOCKER_USER_HOME/.local/share/code-server/User && \
+  chown -R $DOCKER_USER:$DOCKER_USER $DOCKER_USER_HOME/.local/share/code-server
+COPY --chown=$DOCKER_USER:$DOCKER_USER .vscode/settings.json.dist \
+  $DOCKER_USER_HOME/.local/share/code-server/User/settings.json
+USER ${DOCKER_HOST_UID}:${DOCKER_HOST_GID}
+RUN set -eux; \
+  for ext in $CODE_SERVER_EXTENSIONS; do \
+    /usr/local/bin/code-server --install-extension "$ext" --force; \
+  done
+RUN git config --global --add safe.directory /application
+WORKDIR /application

README.md

@@ -23,6 +23,7 @@
   * [Optional: Use `dev` for checks and experiments](#optional-use-dev-for-checks-and-experiments)
   * [GitHub CI checks](#github-ci-checks)
   * [Optional: Run Codex or Gemini (see more examples below)](#optional-run-codex-or-gemini-see-more-examples-below)
+  * [Optional: Run code-server (VS Code in browser)](#optional-run-code-server-vs-code-in-browser)
   * [Optional: Run JupyterLab](#optional-run-jupyterlab)
 * [💻 AI-Powered CLI Workflow (Gemini & Codex)](#-ai-powered-cli-workflow-gemini--codex)
   * [If you do not have API keys](#if-you-do-not-have-api-keys)
@@ -76,10 +77,12 @@ Use it as-is or tailor it to match your team's development workflow.
 ```text
 .
 ├── .github/workflows/ci.yml      # GitHub CI: build dev/app, run Ruff + pytest
+├── .vscode/*.json.dist           # VS Code / code-server editor defaults
 ├── src/sample/main.py            # Example application module
 ├── tests/sample/test_main.py     # Example pytest tests to extend in your project
-├── Dockerfile                    # Multi-stage images (base, dev, vim-ide, app)
+├── Dockerfile                    # Multi-stage images (base, dev, vim-ide, code-server, app)
 ├── compose.yaml                  # Local service orchestration for template workflows
+├── .env.dist                     # Default compose/build/runtime variables
 ├── pyproject.toml                # Poetry dependencies and tool configuration
 ├── poetry.lock                   # Locked dependency graph
 └── README.md                     # Setup and usage documentation
@@ -113,6 +116,8 @@ cp .env.dist .env
 cp .vimrc.dist .vimrc
 cp .coc-settings.json.dist .coc-settings.json
 docker compose build vim-ide
+# Optional alternative editor:
+# docker compose build code-server
 docker compose run --rm vim-ide
 ```
 
@@ -144,6 +149,11 @@ Set the `.env` values used by `compose.yaml` and the Docker build. Common ones:
 * `POETRY_OPTIONS_DEV` — Poetry install flags for the dev image.
 * `PIP_DEFAULT_TIMEOUT` — Pip network timeout (seconds).
 * `JUPYTER_TOKEN` — Token for JupyterLab login.
+* `CODE_SERVER_EXTENSIONS` — Space-separated extension IDs preinstalled in code-server.
+* `CODE_SERVER_HOST` — Bind address for code-server (usually `0.0.0.0`).
+* `CODE_SERVER_PORT` — Port for code-server.
+* `CODE_SERVER_AUTH` — code-server auth mode (`password` or `none`).
+* `CODE_SERVER_PASSWORD` — Password used by code-server when auth is `password`.
 * `OPENAI_API_KEY` — API key for Codex.
 * `GEMINI_API_KEY` — API key for Gemini.
 
@@ -189,8 +199,8 @@ docker compose run --rm poetry lock
 
 > 🔄 Note: If you've changed dependencies (e.g. updated pyproject.toml or
 > poetry.lock), rebuild the image(s) that install Python dependencies:
-> `vim-ide`, `dev`, `codex`, `gemini`, `jupyterlab`, and/or `app` depending on
-> what you run.
+> `vim-ide`, `dev`, `codex`, `gemini`, `code-server`, `jupyterlab`, and/or
+> `app` depending on what you run.
 
 ```bash
 docker compose build vim-ide
@@ -236,7 +246,8 @@ docker compose run --rm dev ruff format --check
 This template includes a minimal GitHub Actions workflow in
 `.github/workflows/ci.yml` that:
 
-* builds `dev` and `app` images
+* builds `dev`, `app`, `vim-ide`, `codex`, `gemini`, `jupyterlab`, and `code-server`
+* checks `vim`, `codex`, `gemini`, `jupyter-lab`, and `code-server` binaries
 * runs `ruff check .`
 * runs `ruff format --check .`
 * runs `pytest -q`
@@ -269,6 +280,25 @@ docker compose build gemini
 docker compose run --rm gemini
 ```
 
+### Optional: Run code-server (VS Code in browser)
+
+Create the editor config files from dist templates (recommended):
+
+```bash
+mkdir -p .vscode
+cp .vscode/settings.json.dist .vscode/settings.json
+cp .vscode/extensions.json.dist .vscode/extensions.json
+```
+
+```bash
+docker compose build code-server
+docker compose run --rm --service-ports code-server
+# Open: http://127.0.0.1:${CODE_SERVER_PORT}
+```
+
+`compose.yaml` controls port/auth via `CODE_SERVER_HOST`, `CODE_SERVER_PORT`,
+`CODE_SERVER_AUTH`, and `CODE_SERVER_PASSWORD`.
+
 ### Optional: Run JupyterLab
 
 ```bash

compose.yaml

@@ -14,6 +14,7 @@ x-default-args: &default-args
   MIRROR_LIST_COUNTRY: ${MIRROR_LIST_COUNTRY:-RU}
   BUILD_PACKAGES: ${BUILD_PACKAGES:-pyenv git gnupg sudo postgresql-libs mariadb-libs openmp}
   VIM_PACKAGES: ${VIM_PACKAGES:-python vim vim-spell-en vim-spell-ru ctags ripgrep bat npm nodejs-lts-jod openai-codex gemini-cli}
+  CODE_SERVER_EXTENSIONS: ${CODE_SERVER_EXTENSIONS:-ms-python.python ms-pyright.pyright charliermarsh.ruff ms-toolsai.jupyter}
   PYTHON_VERSION: ${PYTHON_VERSION:-3.14}
   PIP_DEFAULT_TIMEOUT: ${PIP_DEFAULT_TIMEOUT:-300}
   POETRY_VERSION: ${POETRY_VERSION:-2.3.2}
@@ -115,7 +116,25 @@ services:
     volumes:
       - type: volume
         source: codex-auth
-        target: ${DOCKER_USER_HOME}/.codex
+        target: ${DOCKER_USER_HOME:-/home/developer}/.codex
+  code-server:
+    platform: *platform
+    <<: *default-shm
+    entrypoint:
+      - code-server
+      - --bind-addr=${CODE_SERVER_HOST:-0.0.0.0}:${CODE_SERVER_PORT:-8443}
+      - --auth=${CODE_SERVER_AUTH:-password}
+      - /application
+    ports:
+      - "${CODE_SERVER_PORT:-8443}:${CODE_SERVER_PORT:-8443}"
+    build:
+      target: code-server
+      args: *default-args
+    environment:
+      <<: *default-env
+      PASSWORD: ${CODE_SERVER_PASSWORD:-change_me}
+    volumes:
+      - *vol-app
   jupyterlab:
     platform: *platform
     <<: *default-shm