mirror of
https://github.com/jjbrunton/Sauci.git
synced 2026-10-31 18:19:43 +00:00
jjbruntonandClaude Opus 5
d825e3d80c
The policy accepted only `staging` as a head for main, so any change production needed before the next promotion had nowhere to go: the PR was unmergeable by CI and branch protection blocks direct pushes. Accept `hotfix/*` and `release/*` heads as well. The naming requirement keeps a direct-to-main change deliberate and visible, and the master freeze plus the "features target staging" rule are unchanged. Document the escape hatch and the need to land the same commit on staging. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
49 lines
2.5 KiB
Markdown
49 lines
2.5 KiB
Markdown
# Backend deployment and branching
|
|
|
|
Dokploy deploys the standalone backend directly from GitHub. GitHub Actions is
|
|
the verification gate; it does not hold a broad Dokploy API credential and does
|
|
not deploy the retired Supabase data plane.
|
|
|
|
## Branch contract
|
|
|
|
| Branch | Purpose | Dokploy target | Public API |
|
|
|---|---|---|---|
|
|
| feature branches | isolated reviewed work | none | none |
|
|
| `staging` | integrated release candidate | `backend-staging` | `https://api.preprod.sauci.app` |
|
|
| `main` | production promotion | `backend-production` | `https://api.sauci.app` |
|
|
| `master` | frozen legacy default | none | none |
|
|
|
|
Normal feature pull requests target `staging`. After CI and authenticated staging
|
|
acceptance pass, open a promotion pull request from `staging` to `main`. Prefer
|
|
that route: production then runs the exact commit already exercised in staging.
|
|
|
|
When production needs a change that cannot wait for the next promotion, open a
|
|
pull request into `main` from a `hotfix/*` or `release/*` branch. CI enforces
|
|
that naming so a direct-to-main change is always deliberate and visible. Land
|
|
the same commit on `staging` too, or the next promotion will revert it. Direct
|
|
pushes to either deployment branch remain blocked by branch protection.
|
|
|
|
Each Dokploy Compose application is connected to `jjbrunton/Sauci`, watches its
|
|
single branch with push-triggered automatic deployment, and uses
|
|
`infra/backend/compose.production.yaml`. The Compose file deliberately has no
|
|
top-level project name so Dokploy assigns different project names, networks, and
|
|
named volumes to staging and production. Never point both applications at the
|
|
same PostgreSQL or media volume.
|
|
|
|
## Promotion checks
|
|
|
|
1. GitHub `Verify / static` and `Verify / backend-integration` succeed for the
|
|
candidate commit.
|
|
2. The Dokploy deployment for `staging` reports success; `/health/live` and
|
|
`/health/ready` return 200 over valid TLS.
|
|
3. An unauthenticated protected request returns 401, proving the public route is
|
|
not bypassing authentication.
|
|
4. The mobile app signs in through non-production Supabase Auth and reads real
|
|
migrated content from `https://api.preprod.sauci.app`.
|
|
5. Promote the exact `staging` commit to `main` and verify the production health,
|
|
TLS, and authentication boundary independently.
|
|
|
|
Health proves infrastructure, not customer-data cutover. The App Store build
|
|
must not be released against production until the controlled final sync and the
|
|
checks in [backend-cutover.md](backend-cutover.md) are complete.
|