Register print_forge for django deploy (closes #27)

Catalog + host_apps (prod 8007 / beta 8019) with dj-queue worker singleton on adama. Unused abc_be prod reserve moves to 8009.

IMPLEMENTATION.md

@@ -217,6 +217,7 @@ After Docker install, re-SSH so the `docker` group membership takes effect.
 | `monica_site` | django (docker) | all webservers | beta + prod | active/active behind NPM; no bundled Postgres (like `scha`); dj-queue **worker singleton on adama** only (`compose --profile worker`); Ollama social drafting via `10.0.0.128:11434` |
 | `url_shortening_service` | django (docker) | all webservers | beta + prod | active/active behind NPM; no bundled Postgres; **no worker**. Two public hosts, same container: short domain (`GET /`, `GET /<code>` 302) and API host (`/api/links/`, Bearer required). |
 | `college_craft` | django (docker) | all webservers | beta + prod | active/active behind NPM; no bundled Postgres (like `scha` / `monica_site`); dj-queue **worker singleton on adama** only (`compose --profile worker`); Ollama social drafting via `10.0.0.128:11434`; Nominatim `http://10.0.0.128:8089`; prod `SITE_UNDER_CONSTRUCTION=true` until launch |
+| `print_forge` | django (docker) | all webservers | beta + prod | active/active behind NPM; no bundled Postgres (like `scha` / `monica_site` / `college_craft`); dj-queue **worker singleton on adama** only (`compose --profile worker`); Nominatim `http://10.0.0.128:8089`; prod `SITE_UNDER_CONSTRUCTION=true` until launch; prod NPM waits until launch |
 | `abc_be` | django (docker) | all webservers | **beta only** | AI Benefits Coach API; no bundled Postgres; Ollama `http://10.0.0.128:11434`; shares DB `abc_be_beta` with `abc_worker` |
 | `abc_worker` | django-type compose (FastAPI) | all webservers | **beta only** | same Postgres as `abc_be`; `migrate_cmd: true`; WS on host port 8018 |
 | `abc_fe` | node-static (Vite) | all webservers | **beta only** | built to `/var/www/<env>.abc.aimloperations/html`; no prod `host_apps` row |
@@ -230,7 +231,7 @@ a DB.
 - `app_catalog` (`group_vars/all.yml`) — how each app is built (repo, type, compose file, migrate cmd).
 - `host_apps` (`host_vars/<host>.yml`) — which app+env+port runs on that host.
   Optional `compose_profiles: [worker]` activates docker compose profiles on that
-  host only (used for `monica_site` / `college_craft` dj-queue singleton on adama).
+  host only (used for `monica_site` / `college_craft` / `print_forge` dj-queue singleton on adama).
 - Django app = one compose project per env: project name `<app>_<env>`, host port from `host_apps`.
   Ports match across app hosts so NPM can balance `adama:PORT` + `roslin:PORT` + `starbuck:PORT` + `apollo:PORT`.
 
@@ -249,7 +250,8 @@ future beta replica.
 | monica_site | 8014 | 8004 | all webservers |
 | url_shortening_service | 8015 | 8005 | all webservers |
 | college_craft | 8016 | 8006 | all webservers |
-| abc_be | **8017** | 8007 (*not deployed*) | all webservers |
+| print_forge | **8019** | **8007** | all webservers |
+| abc_be | **8017** | 8009 (*not deployed*) | all webservers |
 | abc_worker | **8018** | 8008 (*not deployed*) | all webservers |
 | dta_webapp (nginx) | 8081 | 8080 | all webservers |
 | chat_web_app (nginx) | 8083 | 8082 | all webservers |
@@ -261,7 +263,7 @@ Host-local services on ai-server-4080 (not balanced by NPM):
 | Service | Port | Notes |
 |---------|------|-------|
 | Ollama | 11434 | Not Ansible-managed today; GPU host (`monica_site` / `college_craft` social drafting) |
-| Nominatim | 8089 | Not Ansible-managed today; LAN address autocomplete for `college_craft` |
+| Nominatim | 8089 | Not Ansible-managed today; LAN address autocomplete for `college_craft` / `print_forge` |
 | SearxNG | 8088 | `roles/searxng` (#10); JSON API for chat_backend grounded search |
 | Loki | 3100 | `roles/observability` |
 | Prometheus | 9090 | `roles/observability` |
@@ -287,7 +289,7 @@ chat_backend secrets must use `SEARXNG_BASE_URL=http://10.0.0.128:8088`.
   to host `{{ apps_env_dir }}` → git checkout at ref → copy `.env` into checkout →
   `docker compose build` → `up -d` (with `COMPOSE_PROFILES` from optional
   `host_apps.compose_profiles`) → migrate (run once, shared DB).
-  **`monica_site` / `college_craft` worker:** adama `host_apps` sets
+  **`monica_site` / `college_craft` / `print_forge` worker:** adama `host_apps` sets
   `compose_profiles: [worker]` so deploy starts dj-queue with web. Other hosts
   omit profiles (web only).
 - **node-static**: git checkout at ref → `npm ci` → `npm run build:<env>`
@@ -320,6 +322,7 @@ point each domain at the backend(s):
 | url_shortening_service (short) | `aiml.pw` and/or `cidinn.li` (pick when DNS is ready); `short-beta.aimloperations.com` (beta). Proxy `/` + `/[a-z0-9]{4,8}` only — 404 `/api/`, `/admin/`, `/debug/` | `adama:8005` / `8015` + same on roslin / starbuck / apollo / ai-server-4080 |
 | url_shortening_service (API) | `shortener.aimloperations.com`; `shortener-beta.aimloperations.com` (beta). Proxy `/api/` only — 404 `/admin/` | same ports as short host (one container) |
 | college_craft | `collegecraft.com` (+ www); `college-craft-preview.aimloperations.com` (beta) | `adama:8006` / `8016` + same on roslin / starbuck / apollo / ai-server-4080 |
+| print_forge | `printforgeprints.com` (+ www) — **do not NPM-route prod until launch**; `print-forge-preview.aimloperations.com` (beta) | `adama:8007` / `8019` + same on roslin / starbuck / apollo / ai-server-4080 |
 | abc_fe | `beta.abc.aimloperations.com` (beta only) | `adama:8085` + same on roslin / starbuck / apollo / ai-server-4080 |
 | abc_be | `beta.abc.be.aimloperations.com` (beta only) | `adama:8017` + same on roslin / starbuck / apollo / ai-server-4080 |
 | abc_worker | `beta.abc.worker.aimloperations.com` (beta only; HTTP + WebSocket upgrade) | `adama:8018` + same on roslin / starbuck / apollo / ai-server-4080 |
@@ -361,6 +364,8 @@ do not).
 | url_shortening_service | beta | `url_shortener_beta` | `postgres://westfarn:<pw>@10.0.0.230:5432/url_shortener_beta` |
 | college_craft | prod | `college_craft` | `postgres://westfarn:<pw>@10.0.0.230:5432/college_craft` |
 | college_craft | beta | `college_craft_beta` | `postgres://westfarn:<pw>@10.0.0.230:5432/college_craft_beta` |
+| print_forge | prod | `print_forge` | `postgres://westfarn:<pw>@10.0.0.230:5432/print_forge` |
+| print_forge | beta | `print_forge_beta` | `postgres://westfarn:<pw>@10.0.0.230:5432/print_forge_beta` |
 | abc_be | beta | `abc_be_beta` | `postgres://westfarn:<pw>@10.0.0.230:5432/abc_be_beta` |
 | abc_worker | beta | *(same `abc_be_beta`)* | worker uses `DB_*` pointing at `abc_be_beta` — do **not** create a second DB |
 
@@ -390,6 +395,23 @@ App-repo companion (`college_craft`, not this repo): deploy workflows still call
 `--app client_site` (template leftover). They must become `--app college_craft`
 before CI deploy will hit this catalog entry. Default branch is `master` (not `main`).
 
+`print_forge` extra env (control-node secrets, not in git):
+`~/Documents/secrets/print_forge/print_forge_prod.env` and
+`print_forge_beta.env`. Template: app repo `.env.prod.example`.
+`DJANGO_ENV` / `DJANGO_ALLOWED_HOSTS` / `DATABASE_URL` / `WEB_PORT` /
+`PUBLIC_SITE_URL` differ per env (prod `printforgeprints.com` / `:8007`;
+beta `print-forge-preview.aimloperations.com` / `:8019`).
+`SITE_UNDER_CONSTRUCTION=true` on prod (holding page until launch), `false` on beta.
+Purchased flags: `FEATURE_EMAIL_SMS`, `FEATURE_PAYMENTS`, `FEATURE_SHOP`,
+`FEATURE_SHIPPING`. Other `FEATURE_*` stay false. Add a `print_forge:<token>`
+entry to `SHORTENER_API_TOKENS` on `url_shortening_service` (beta token first).
+`SHORTENER_BASE_URL` is prod shortener on prod, `https://shortener-beta.aimloperations.com`
+on beta. Default branch is `master`.
+
+Companion app ticket: [print_forge#1](https://git.aimloperations.com/ai_ml_operations/print_forge/issues/1)
+([#27](https://git.aimloperations.com/ai_ml_operations/server-infra/issues/27)).
+App Gitea workflow deploys beta on push to `master` (`--app print_forge`).
+
 `abc_be` / `abc_worker` / `abc_fe` (GIS org, not this repo) — **beta only** ([#26](https://git.aimloperations.com/ai_ml_operations/server-infra/issues/26)):
 
 Control-node secrets (never git, mode `600`):
@@ -404,7 +426,7 @@ Templates: `GIS/abc_be` `.env.beta.example`, `GIS/abc_worker` `.env.beta.example
 Create Postgres DB `abc_be_beta` and grant `westfarn` before first deploy.
 NPM: `beta.abc.aimloperations.com` → `:8085`, `beta.abc.be.aimloperations.com` → `:8017`,
 `beta.abc.worker.aimloperations.com` → `:8018` (enable WebSocket). No prod ABC
-`host_apps` rows; ports 8007 / 8008 / 8084 reserved.
+`host_apps` rows; ports **8009** / 8008 / 8084 reserved (`print_forge` took prod **8007**).
 
 Companion workflows: [abc_be#22](https://git.aimloperations.com/GIS/abc_be/issues/22),
 [abc_worker#27](https://git.aimloperations.com/GIS/abc_worker/issues/27),
@@ -487,7 +509,8 @@ Store vault password for CI in a file readable only by the Act runner (e.g. `~/.
 | 10f | Add starbuck + apollo as app hosts (same workloads as roslin) | Done ([#20](https://git.aimloperations.com/ai_ml_operations/server-infra/issues/20)) |
 | 10g | Register + deploy `url_shortening_service` (django, ports 8005/8015) | Done ([#22](https://git.aimloperations.com/ai_ml_operations/server-infra/issues/22)) |
 | 10h | Register + deploy `college_craft` (django, ports 8006/8016) | Done ([#24](https://git.aimloperations.com/ai_ml_operations/server-infra/issues/24)) |
-| 10i | Register + deploy ABC beta (`abc_be` 8017, `abc_worker` 8018, `abc_fe` 8085) | This PR ([#26](https://git.aimloperations.com/ai_ml_operations/server-infra/issues/26)) |
+| 10i | Register + deploy ABC beta (`abc_be` 8017, `abc_worker` 8018, `abc_fe` 8085) | Done ([#26](https://git.aimloperations.com/ai_ml_operations/server-infra/issues/26)) |
+| 10j | Register + deploy `print_forge` (django, ports 8007/8019) | This PR ([#27](https://git.aimloperations.com/ai_ml_operations/server-infra/issues/27)) |
 | 11 | Gitea container registry (optional) | Future |
 
 ## Open Decisions