Migrate deployment from Hetzner to Coolify #1

Merged

sharang merged 14 commits from coolify into main 2026-03-13 10:45:35 +00:00

Conversation 0 Commits 14 Files Changed 9 +377 -121

sharang commented 2026-03-13 09:50:42 +00:00

Owner

Copy Link

Summary

• Add Coolify deployment configuration (docker-compose, healthchecks, network setup)
• Replace deploy-hetzner CI job with Coolify webhook deploy
• Externalize postgres, qdrant, S3 for Coolify environment

All changes since branch creation

• Coolify docker-compose with Traefik labels and healthchecks
• CI pipeline: deploy-hetzner → deploy-coolify (simple webhook curl)
• SQLAlchemy 2.x text() compatibility fixes
• Alpine-compatible Dockerfile fixes

## Summary - Add Coolify deployment configuration (docker-compose, healthchecks, network setup) - Replace deploy-hetzner CI job with Coolify webhook deploy - Externalize postgres, qdrant, S3 for Coolify environment ## All changes since branch creation - Coolify docker-compose with Traefik labels and healthchecks - CI pipeline: deploy-hetzner → deploy-coolify (simple webhook curl) - SQLAlchemy 2.x text() compatibility fixes - Alpine-compatible Dockerfile fixes

sharang added 13 commits 2026-03-13 09:50:43 +00:00

feat: add Coolify deployment configuration ... 2ec340c64b

Add docker-compose.coolify.yml (8 services), .env.coolify.example,
and Gitea Action workflow for Coolify API deployment. Removes
core-health-check and docs. Adds Traefik labels for
*.breakpilot.ai domain routing with Let's Encrypt SSL.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

refactor(coolify): externalize postgres, qdrant, S3 ... 99f3180ffc

- Replace bp-core-postgres with POSTGRES_HOST env var
- Replace bp-core-qdrant with QDRANT_HOST env var
- Replace bp-core-minio with S3_ENDPOINT/S3_ACCESS_KEY/S3_SECRET_KEY

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

fix: update alpine base to 3.21 for ai-compliance-sdk ... 998d427c3c

Alpine 3.19 apk mirrors failing during Coolify build.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

fix: use Alpine-compatible addgroup/adduser flags in Dockerfiles ... a3d0024d39

Replace --system/--gid/--uid (Debian syntax) with -S/-g/-u (BusyBox/Alpine).
Coolify ARG injection causes exit code 255 with Debian-style flags.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

fix: ensure public dir exists in developer-portal build ... d542dbbacd

Next.js standalone COPY fails when no public directory exists in source.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Sync coolify compose with main: use COMPLIANCE_DATABASE_URL, QDRANT_URL ... ffd256d420

- Switch to ${COMPLIANCE_DATABASE_URL} for admin-compliance, backend, SDK, crawler
- Add DATABASE_URL to admin-compliance environment
- Switch ai-compliance-sdk from QDRANT_HOST/PORT to QDRANT_URL + QDRANT_API_KEY
- Add MINIO_SECURE to compliance-tts-service
- Update .env.coolify.example with new variable patterns

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Remove Traefik labels from coolify compose — Coolify handles routing ... 0c01f1c96c

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Add healthchecks to admin-compliance, developer-portal, backend-compliance ... 005fb9d219

Traefik may require healthchecks to route traffic to containers.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Add healthcheck to dsms-gateway ... 033fa52e5b

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Fix SQLAlchemy 2.x compatibility: wrap raw SQL in text() ... 86588aff09

SQLAlchemy 2.x requires raw SQL strings to be explicitly wrapped
in text(). Fixed 16 instances across 5 route files.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Add coolify network to externally-routed services ... f6b22820ce

Traefik routes traffic via the 'coolify' bridge network, so services
that need public domain access must be on both breakpilot-network
(for inter-service communication) and coolify (for Traefik routing).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Add traefik.docker.network label to fix routing ... a101426dba

Containers are on multiple networks (breakpilot-network, coolify,
gokocgws...). Without traefik.docker.network, Traefik randomly picks
a network and may choose breakpilot-network where it has no access.
This label forces Traefik to always use the coolify network.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Replace deploy-hetzner with Coolify webhook deploy ... 559d7960a2

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

sharang added 1 commit 2026-03-13 10:42:51 +00:00

Remove standalone deploy-coolify.yml — deploy is handled in ci.yaml ... 1dfea51919

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

sharang merged commit f1710fdb9e into main 2026-03-13 10:45:35 +00:00

sharang referenced this issue from a commit 2026-03-13 10:45:36 +00:00

fix: migrate deployment from Hetzner to Coolify (#1)

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

No items

No Label

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

sharang Benjamin_Boenisch

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: Benjamin_Boenisch/breakpilot-compliance#1