ci/cd to publish images
forwarding secret (vault(?))

make lobby a service and not a batch cause it needs to restart
but that wouldn't work with the template...