Add Django site, Docker packaging, and beta/prod Gitea deploys.

Unignore site/ (was blocked by mkdocs /site rule), add compose/Docker/uv tooling, and split deploys so push to main goes to beta while prod stays manual.
2026-08-08 07:32:55 -05:00
parent 7dca98bbf6
commit 1f7d78de64
204 changed files with 21662 additions and 70 deletions
@@ -0,0 +1,113 @@
+# Secret env files for server-infra deploy.
+# Copy to the control node (never commit):
+#   ~/Documents/secrets/monica_site/monica_site_prod.env
+#   ~/Documents/secrets/monica_site/monica_site_beta.env
+#
+# server-infra pushes these to /opt/apps/env/monica_site_<env>.env on each host.
+#
+# Docker Compose: if a secret contains $ (e.g. in DATABASE_URL password), escape each
+# $ as $$ or compose will treat $word as a variable.
+
+# =============================================================================
+# PROD — mkdrealtor.com (holding page until launch)
+# =============================================================================
+DJANGO_ENV=prod
+DJANGO_DEBUG=false
+DJANGO_SECRET_KEY=replace-with-a-long-random-secret
+DJANGO_ALLOWED_HOSTS=mkdrealtor.com,www.mkdrealtor.com
+# Optional override; when unset, https:// origins are derived from DJANGO_ALLOWED_HOSTS.
+# DJANGO_CSRF_TRUSTED_ORIGINS=https://mkdrealtor.com,https://www.mkdrealtor.com
+
+# Holding page gate — keep true on prod until go-live; beta should be false.
+SITE_UNDER_CONSTRUCTION=true
+
+SITE_NAME=Monica Dhillon
+SITE_TAGLINE=MKDRealtor.com · EXIT Realty Redefined
+PUBLIC_SITE_URL=https://mkdrealtor.com
+DEFAULT_FROM_EMAIL=noreply@mkdrealtor.com
+CONTACT_PHONE=
+CONTACT_EMAIL=
+CONTACT_SERVICE_AREA=Serving Greater Metro Area
+CREDIT_NAME=AI ML Operations, LLC
+CREDIT_URL=https://aimloperations.com
+
+# Shared external Postgres (10.0.0.230)
+DATABASE_URL=postgres://westfarn:replace-db-password@10.0.0.230:5432/monica_site
+
+# Host port on adama/roslin/ai-server-4080 (must match server-infra host_apps)
+WEB_PORT=8004
+
+# reCAPTCHA v3
+RECAPTCHA_PUBLIC_KEY=replace-me
+RECAPTCHA_PRIVATE_KEY=replace-me
+
+# SMTP2GO email
+EMAIL_HOST=mail.smtp2go.com
+EMAIL_HOST_USER=replace-me
+EMAIL_HOST_PASSWORD=replace-me
+EMAIL_PORT=2525
+EMAIL_USE_TLS=true
+
+# SMTP2GO SMS
+SMTP2GO_SMS_API_KEY=replace-me
+# Email + SMS event webhook auth. SMTP2GO Authorization header = Bearer + this value.
+SMTP2GO_WEBHOOK_SECRET=replace-me
+
+# Postcards — PCM Integrations
+POSTCARD_PROVIDER=pcm
+PCM_API_KEY=replace-me
+PCM_WEBHOOK_SECRET=replace-me
+# JSON return address for postcard orders
+PCM_RETURN_ADDRESS={"firstName":"Monica","lastName":"Dhillon","address":"replace-me","city":"replace-me","state":"IL","zipCode":"replace-me"}
+# LOB_API_KEY=  # only if POSTCARD_PROVIDER=lob
+# CLICK2MAIL_API_KEY=
+# POSTGRID_API_KEY=
+
+# Social (native)
+META_APP_ID=
+META_APP_SECRET=
+LINKEDIN_CLIENT_ID=
+LINKEDIN_CLIENT_SECRET=
+SOCIAL_TOKEN_ENCRYPTION_KEY=replace-with-fernet-key
+
+# Ollama for social drafting (reachable from app hosts)
+OLLAMA_BASE_URL=http://10.0.0.128:11434
+OLLAMA_MODEL=llama3.2
+OLLAMA_TIMEOUT_SECONDS=120
+
+# Nominatim address suggest (server-side proxy only; not called from browser)
+NOMINATIM_BASE_URL=http://10.0.0.128:8089
+NOMINATIM_TIMEOUT_SECONDS=8
+NOMINATIM_COUNTRY_CODES=us
+# NOMINATIM_API_KEY=
+
+# Tianji analytics (pageviews + events)
+TIANJI_ENABLED=true
+TIANJI_TRACKER_URL=https://tianji.aimloperations.com/tracker.js
+TIANJI_WEBSITE_ID=cmshzhxdf6gee10qzkzrfn9iw
+
+GUNICORN_WORKERS=2
+GUNICORN_BIND=0.0.0.0:8000
+
+# =============================================================================
+# BETA overrides — monica-preview.aimloperations.com (full app)
+# File: monica_site_beta.env
+# =============================================================================
+# DJANGO_ENV=beta
+# DJANGO_DEBUG=false
+# DJANGO_SECRET_KEY=replace-with-a-different-beta-secret
+# DJANGO_ALLOWED_HOSTS=monica-preview.aimloperations.com
+# SITE_UNDER_CONSTRUCTION=false
+# PUBLIC_SITE_URL=https://monica-preview.aimloperations.com
+# DATABASE_URL=postgres://westfarn:replace-db-password@10.0.0.230:5432/monica_site_beta
+# WEB_PORT=8014
+# RECAPTCHA_PUBLIC_KEY=replace-me
+# RECAPTCHA_PRIVATE_KEY=replace-me
+# EMAIL_HOST_USER=replace-me
+# EMAIL_HOST_PASSWORD=replace-me
+# SMTP2GO_SMS_API_KEY=replace-me
+# LOB_API_KEY=replace-me
+# SOCIAL_TOKEN_ENCRYPTION_KEY=replace-with-fernet-key
+# OLLAMA_BASE_URL=http://10.0.0.128:11434
+# NOMINATIM_BASE_URL=http://10.0.0.128:8089
+# NOMINATIM_COUNTRY_CODES=us