fix(gitea): runner config for caching 2

gitea/compose.yml

@@ -74,6 +74,16 @@ services:
       GITEA_RUNNER_NAME: docker-runner
       GITEA_RUNNER_LABELS: ubuntu-latest:docker://catthehacker/ubuntu:act-latest,ubuntu-22.04:docker://catthehacker/ubuntu:act-22.04,ubuntu-20.04:docker://catthehacker/ubuntu:act-20.04
       DOCKER_HOST: unix:///var/run/docker.sock
+    ports:
+      # Fixed cache-server port (see runner-config.yaml's cache.port) so
+      # job containers - isolated on their own per-task Docker network,
+      # unreachable via container name regardless of the `network` setting
+      # below - can still reach it via host.docker.internal, which resolves
+      # to their own network's gateway and routes back to this published
+      # port. Exposed on the VPS's public interface too; consider a
+      # firewall rule restricting it to Docker's private bridge ranges
+      # (172.16.0.0/12) if that's a concern.
+      - "8088:8088"
     volumes:
       - ../.data/gitea/runner:/data
       - /var/run/docker.sock:/var/run/docker.sock