Move to infisical. Create local dev environment. Add ci gates. Modernize repo

docker/compose.yml

@@ -7,7 +7,19 @@ services:
     build:
       context: ../
       dockerfile: ./docker/Dockerfile
-    image: ${NEXT_CONTAINER_NAME}:latest
+      args:
+        SENTRY_AUTH_TOKEN: ${SENTRY_AUTH_TOKEN}
+        SENTRY_DISABLE_AUTO_UPLOAD: ${SENTRY_DISABLE_AUTO_UPLOAD:-false}
+        NEXT_PUBLIC_SITE_URL: ${NEXT_PUBLIC_SITE_URL}
+        NEXT_PUBLIC_CONVEX_URL: ${NEXT_PUBLIC_CONVEX_URL}
+        NEXT_PUBLIC_PLAUSIBLE_URL: ${NEXT_PUBLIC_PLAUSIBLE_URL}
+        NEXT_PUBLIC_SENTRY_DSN: ${NEXT_PUBLIC_SENTRY_DSN}
+        NEXT_PUBLIC_SENTRY_URL: ${NEXT_PUBLIC_SENTRY_URL}
+        NEXT_PUBLIC_SENTRY_ORG: ${NEXT_PUBLIC_SENTRY_ORG}
+        NEXT_PUBLIC_SENTRY_PROJECT_NAME: ${NEXT_PUBLIC_SENTRY_PROJECT_NAME}
+        PAYLOAD_SECRET: ${PAYLOAD_SECRET}
+        PAYLOAD_DB_URL: ${PAYLOAD_DB_URL}
+    image: convexmonorepo-next:latest
     #image: git.gbrown.org/gib/${NEXT_CONTAINER_NAME}:latest
     container_name: ${NEXT_CONTAINER_NAME}
     environment:
@@ -43,12 +55,13 @@ services:
     labels: ['com.centurylinklabs.watchtower.enable=true']
     environment:
       - INSTANCE_NAME=${INSTANCE_NAME}
-      #- INSTANCE_SECRET
+      - INSTANCE_SECRET=${INSTANCE_SECRET}
       - CONVEX_CLOUD_ORIGIN=${CONVEX_CLOUD_ORIGIN:-http://${BACKEND_CONTAINER_NAME:-stpeteit-backend}:${BACKEND_PORT:-3210}}
       - CONVEX_SITE_ORIGIN=${CONVEX_SITE_ORIGIN:-http://${BACKEND_CONTAINER_NAME:-stpeteit-backend}:${SITE_PROXY_PORT:-3211}}
       - DISABLE_BEACON=${DISABLE_BEACON:-true}
       - REDACT_LOGS_TO_CLIENT=${REDACT_LOGS_TO_CLIENT:-true}
       - DO_NOT_REQUIRE_SSL=${DO_NOT_REQUIRE_SSL:-false}
+      # Optional: Convex-on-Postgres is not the template default.
       #- POSTGRES_URL=${POSTGRES_URL}
     stdin_open: true
     tty: true
@@ -80,25 +93,27 @@ services:
     stop_grace_period: 10s
     stop_signal: SIGINT
 
+  # Optional production Postgres. Payload may instead continue using an
+  # external/VPN PAYLOAD_DB_URL. Convex does not share this DB by default.
   #convexmonorepo-postgresql:
-    #image: postgres:17
-    #container_name: ${POSTGRES_CONTAINER_NAME:-convexmonorepo-postgres}
-    #hostname: ${POSTGRES_CONTAINER_NAME:-convexmonorepo-postgres}
-    #domainname: postgres.${NEXT_DOMAIN:-convexmonorepo.gbrown.org}
-    #networks: ['${NETWORK:-nginx-bridge}']
-    #ports: ['5432:5432']
-    #environment:
-      #- POSTGRES_USER=${POSTGRES_USER:-convexmonorepo}
-      #- POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
-      #- POSTGRES_DB=${POSTGRES_DB:-convexmonorepo_payload}
-    #labels: ['com.centurylinklabs.watchtower.enable=true']
-    #volumes: ['./volumes/postgres:/var/lib/postgresql/data']
-    #tty: true
-    #stdin_open: true
-    #restart: unless-stopped
-    #healthcheck:
-      #test: ["CMD-SHELL", "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}"]
-      #start_period: 20s
-      #interval: 30s
-      #retries: 5
-      #timeout: 5s
+  #image: postgres:17
+  #container_name: ${POSTGRES_CONTAINER_NAME:-convexmonorepo-postgres}
+  #hostname: ${POSTGRES_CONTAINER_NAME:-convexmonorepo-postgres}
+  #domainname: postgres.${NEXT_DOMAIN:-convexmonorepo.gbrown.org}
+  #networks: ['${NETWORK:-nginx-bridge}']
+  #ports: ['5432:5432']
+  #environment:
+  #- POSTGRES_USER=${POSTGRES_USER:-convexmonorepo}
+  #- POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
+  #- POSTGRES_DB=${POSTGRES_DB:-convexmonorepo_payload}
+  #labels: ['com.centurylinklabs.watchtower.enable=true']
+  #volumes: ['./volumes/postgres:/var/lib/postgresql/data']
+  #tty: true
+  #stdin_open: true
+  #restart: unless-stopped
+  #healthcheck:
+  #test: ["CMD-SHELL", "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}"]
+  #start_period: 20s
+  #interval: 30s
+  #retries: 5
+  #timeout: 5s