modulorails 1.5.2.pre.2 → 1.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ee7efcc2d3da4b18443714b9b6c28d0b72363dd9eb796bc3a315a3083eef7fa9
-  data.tar.gz: eb1694b391cd532700a3121261531078a1031c7b56c0413d02b9d1e8e3ab45a4
+  metadata.gz: 1be41ee3e5898a6e283359c6df4525cd77cec83e6a37d255996316a305511722
+  data.tar.gz: dec467bed1e055a3c0d11c948563eaa6eead755be40e6b7185cbb2678f54e180
 SHA512:
-  metadata.gz: 636da5294080814834c215a2296e2b0b0726c1eb603318782b2b8854d65c96d940ef4ef0a0f72267e9b02c5a3eda44bd69c26b9a09ca3fc9a3cbcaa7b6038c52
-  data.tar.gz: 3365fb68e3be8bd2a490766610871046ae5d2d64e2dfe6c472ebbb95b28522eb5bf44dbd244bc35a2a69eaee996660974e83b05f1286cf9ebee089b0fa74c0cf
+  metadata.gz: a69ef3ab27fd2e422e5bc7ce588bfa46ca273281ca2e43de7336048b038c1328b22a970066856bd7320df0b144e637348e7d1139cce614c2d068083247d3f666
+  data.tar.gz: 7952e968f9bdf475bfe2806933e7e5e5114e8418891dc4dc09809438eb20c804e48a1d85bca8ed558636db64c1b0eca501ea57da5ae03b0eaf4b943a0c466478

data/.claude/skills/release-modulorails/SKILL.md

@@ -0,0 +1,150 @@
+---
+name: release-modulorails
+description: Release a new version of the Modulorails Ruby gem to RubyGems. Handles version bump, CHANGELOG, commit, tag, push, GitHub release, and gem publication. Trigger this skill whenever the user asks to release, publish, ship, bump, or cut a new version of modulorails — even if they don't explicitly mention "release" or specify a version (ask for it if missing).
+---
+
+# Release the Modulorails gem
+
+Run the full release pipeline for the `modulorails` gem. The user provides the version number (e.g. `1.7.0`) without the `v` prefix. If they omit it, ask before proceeding.
+
+## Conventions
+
+- `<version>`: the version number without `v` prefix (e.g. `1.7.0`)
+- All commands run from the project root: `/home/claude/modulorails`
+- GitHub repo: `https://github.com/moduloTech/modulorails`
+- Gem published to: `https://rubygems.org/gems/modulorails`
+- Tag format: `v<version>` (e.g. `v1.7.0`)
+- The gemspec has `rubygems_mfa_required = 'true'`, so `gem push` will prompt for an OTP. Tell the user to have their authenticator app ready before step 7.
+
+## Steps
+
+### 1. Pre-flight check
+
+- Run `git status` and `git diff` to surface any uncommitted changes.
+- The release commit should only touch `lib/modulorails/version.rb` and `CHANGELOG.md`. If unrelated changes are pending, ask the user whether to include them, stash them, or abort.
+- Confirm the current branch is `master` (the project's main branch) unless the user specified otherwise.
+
+### 2. Bump the version constant
+
+- Edit `lib/modulorails/version.rb` and replace the value of `VERSION` with `<version>`.
+- The constant looks like: `VERSION = '1.6.0'.freeze` — keep the single quotes and `.freeze` to match the existing style.
+
+### 3. Update CHANGELOG.md
+
+The Modulorails CHANGELOG uses its own format — **do not** convert it to Keep-a-Changelog. The structure is:
+
+```
+# Unreleased
+
+# <version>
+
+<one-line summary, optional>
+
+## Features
+- ...
+
+## Improvements
+- ...
+
+## Fixes
+- ...
+
+## Deprecations (will be removed in <next major>)
+- ...
+```
+
+To update:
+
+- Replace the `# Unreleased` heading with `# <version>` (and add a fresh `# Unreleased` line above it for the next cycle).
+- Categorize changes under `## Features`, `## Improvements`, `## Fixes`, or `## Deprecations` as appropriate. Omit sections that have no entries.
+- Run `git log --oneline <last-tag>..HEAD` to find the commits since the previous release; use those as the source of changelog entries. Phrase entries as user-facing descriptions, not commit-message echoes.
+
+### 4. Commit the bump
+
+Stage **only** `lib/modulorails/version.rb` and `CHANGELOG.md`, then commit. Match the project's existing release commit style — prior bumps use messages like `Bump modulorails to 1.6.0`:
+
+```bash
+git add lib/modulorails/version.rb CHANGELOG.md
+git commit -m "$(cat <<'EOF'
+Bump modulorails to <version>
+
+Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
+EOF
+)"
+```
+
+(Use whichever Co-Authored-By trailer matches the model running the session — don't hardcode an older one.)
+
+### 5. Tag
+
+```bash
+git tag -a v<version> -m "v<version>"
+```
+
+### 6. Push commit and tag
+
+```bash
+git push origin master
+git push origin v<version>
+```
+
+### 7. Build and push the gem to RubyGems
+
+```bash
+gem build modulorails.gemspec
+gem push modulorails-<version>.gem
+```
+
+`gem push` will prompt for the OTP because `rubygems_mfa_required` is set in the gemspec. The user must enter it interactively — surface the prompt to them.
+
+If the user is unauthenticated (`You don't have any sources that contain this gem.` or similar), they need to run `gem signin` first. Don't try to manage their RubyGems credentials.
+
+After a successful push, delete the local `.gem` artifact: `rm modulorails-<version>.gem`.
+
+### 8. Create the GitHub release
+
+```bash
+gh release create v<version> --title "v<version>" --notes "<notes>"
+```
+
+Notes should mirror the CHANGELOG section for this version (markdown-formatted). Pass the body via a HEREDOC if it's multi-line, e.g.:
+
+```bash
+gh release create v<version> --title "v<version>" --notes "$(cat <<'EOF'
+## Features
+- ...
+
+## Fixes
+- ...
+EOF
+)"
+```
+
+### 9. Confirm
+
+- Print the GitHub release URL (`gh release view v<version> --json url -q .url`).
+- Print the RubyGems URL: `https://rubygems.org/gems/modulorails/versions/<version>`.
+- Remind the user that downstream apps can pull the new version via `bundle update modulorails`.
+
+## Alternative: `bundle exec rake release`
+
+The Rakefile already loads `bundler/gem_tasks`, so `bundle exec rake release` will, in one shot:
+
+1. Verify the working tree is clean.
+2. Build `modulorails-<version>.gem`.
+3. Tag `v<version>` from the current HEAD.
+4. Push the tag to `origin`.
+5. `gem push` to RubyGems.
+
+Use this only when:
+- The version bump and CHANGELOG are already committed and pushed (it does **not** create the bump commit).
+- The user explicitly asks for the shortcut.
+
+The downsides vs. the step-by-step flow: if `gem push` fails (bad OTP, network), the tag is already pushed and you need to clean up manually. The manual flow keeps tag and gem push independent so each failure mode is recoverable on its own.
+
+## Troubleshooting
+
+- **`gem push` fails with 401 / OTP rejected**: the OTP window is short — re-run with a fresh code. Don't re-tag or re-commit; just retry the `gem push` step.
+- **Tag already exists locally but push fails**: `git tag -d v<version>` and recreate after fixing the underlying issue. Never force-push a tag that's already on RubyGems.
+- **`gem build` complains about missing files**: the gemspec uses `git ls-files` to enumerate files, so untracked files won't be in the gem. Stage them first if they belong, or `.gitignore` them if not.
+- **GitHub release notes don't render properly**: HEREDOC quoting matters — use `<<'EOF'` (with quotes) to prevent shell expansion in the notes body.

data/.rubocop.yml

@@ -10,7 +10,8 @@
 # See https://docs.rubocop.org/rubocop/configuration
 
 # Enabling Rails-specific cops.
-require: rubocop-rails
+plugins:
+  - rubocop-rails
 
 inherit_mode:
   merge:

data/CHANGELOG.md

@@ -4,15 +4,62 @@ This file is used to list changes made in each version of the gem.
 
 # Unreleased
 
-# 1.5.2
+# 1.7.0
+
+## Improvements
+
+- Make the Rubocop generator idempotent: `.rubocop.yml` is no longer rewritten on every Rails boot. Like the other generators, `RubocopGenerator` now uses the `.modulorails.yml` keepfile and a `VERSION` constant — the config is only (re)generated on the first run or when the generator's version is bumped.
+
+## Fixes
+
+- Fix `initialize_from_git` when the git repository is not available (no `.git`, missing `git` binary, or no `origin` remote): rescue the error, warn, and leave `repository` as `nil` instead of crashing the application boot.
+- Fix `send_data` and `self_update` crashing with `NoMethodError` when `Rails.logger` is `nil` (e.g. early initialization or minimal apps): use safe navigation on debug logging.
+
+## Internal
+
+- Add `release-modulorails` Claude Code skill (`.claude/skills/release-modulorails/`) to standardize the gem release workflow.
+
+# 1.6.0
+
+The devcontainer release.
+
+## Features
+
+- Add devcontainer support (`.devcontainer/` with Dockerfile, compose.yml, devcontainer.json).
+- Add Claude Code generator for devcontainer (native installation).
+- Add `Bun` JS engine support.
+- Add `bin/dc` and `bin/dcr` scripts to wrap `docker compose` commands.
+
+## Improvements
+
+- Split DockerGenerator in multiple sub-generators for individual versioning.
+- Merge all keepfiles into `.modulorails.yml`.
+- Force overwrite of keepfile and config files.
+- Speed-up git hooks by checking if regeneration is needed in `refresh_generations.sh`.
+- Add `Modulorails.deprecator` for Rails 7.2+ compatibility.
+- Wrap health_check initializer in `reloader.to_prepare` block.
+- Update Rubocop rules:
+  - Allow `class_methods`/`included` blocks in Concerns to break `Metrics/BlockLength`.
+  - Allow commented lines to break `Layout/LineLength`.
+- Update generators for devcontainers (Sidekiq, GitLab CI).
+- Update production.rb template for Rails 8.
+- Replace old `Dockerfile.prod` with Rails-standard one.
+
+## Fixes
 
 - Fix typo in `database.yml` template for test database.
-- Fix removal of rails' server's pidfile in docker entrypoint.
-- Split DockerGenerator in multiple sub-generators to version each one individually.
-- Merge all keepfiles in one.
-- Wrap health_check initializer in a reloader.to_prepare block.
-- Always use latest ruby in dockeruby.
-- Add Modulorails.deprecator for compatibility with Rails 7.2.
+- Fix removal of rails server's pidfile in docker entrypoint.
+
+## Deprecations (will be removed in 2.0)
+
+- Configuration options: `config.staging_url`, `config.review_base_url`, `config.production_url`, `config.no_auto_update`.
+- `Modulorails::SelfUpdateGenerator`.
+- Infrastructure generators (use Moduloproject 3.0, available later):
+  - `DockerGenerator` and all sub-generators
+  - `GitlabciGenerator`
+  - `ClaudeCodeGenerator`
+  - `ModuloprojectGenerator`
+  - `SidekiqGenerator`
 
 # 1.5.1
 
@@ -136,7 +183,7 @@ Fixes, updates and health_check release.
 Docker release.
 
 - Add generator for Docker.
-- Use templates for Gitlabci generator. 
+- Use templates for Gitlabci generator.
 
 # 0.2.3
 

data/Gemfile.lock

@@ -1,12 +1,15 @@
 PATH
   remote: .
   specs:
-    modulorails (0.4.0)
+    modulorails (1.6.0)
+      bundler-audit (~> 0.9.1)
       git (~> 1.7, >= 1.7.0)
       health_check (~> 3.1)
-      httparty
-      i18n
+      httparty (>= 0.13.3)
+      i18n (>= 0.9.5)
       railties (>= 4.2.0)
+      rubocop (>= 1.28.2)
+      rubocop-rails (>= 2.14.2)
 
 GEM
   remote: https://rubygems.org/
@@ -34,44 +37,64 @@ GEM
       i18n (>= 1.6, < 2)
       minitest (>= 5.1)
       tzinfo (~> 2.0)
+    addressable (2.9.0)
+      public_suffix (>= 2.0.2, < 8.0)
     appraisal (2.4.1)
       bundler
       rake
       thor (>= 0.14.0)
-    builder (3.2.4)
+    ast (2.4.3)
+    bigdecimal (4.1.2)
+    builder (3.3.0)
+    bundler-audit (0.9.3)
+      bundler (>= 1.2.0)
+      thor (~> 1.0)
     concurrent-ruby (1.1.9)
     crass (1.0.6)
+    csv (3.3.5)
     diff-lcs (1.5.0)
-    erubi (1.10.0)
-    git (1.10.2)
+    erubi (1.13.1)
+    git (1.19.1)
+      addressable (~> 2.8)
       rchardet (~> 1.8)
     health_check (3.1.0)
       railties (>= 5.0)
-    httparty (0.20.0)
-      mime-types (~> 3.0)
+    httparty (0.24.2)
+      csv
+      mini_mime (>= 1.0.0)
       multi_xml (>= 0.5.2)
     i18n (1.8.11)
       concurrent-ruby (~> 1.0)
-    loofah (2.13.0)
+    json (2.19.4)
+    language_server-protocol (3.17.0.5)
+    lint_roller (1.1.0)
+    loofah (2.25.1)
       crass (~> 1.0.2)
-      nokogiri (>= 1.5.9)
-    method_source (1.0.0)
-    mime-types (3.4.1)
-      mime-types-data (~> 3.2015)
-    mime-types-data (3.2022.0105)
+      nokogiri (>= 1.12.0)
+    method_source (1.1.0)
+    mini_mime (1.1.5)
     minitest (5.15.0)
-    multi_xml (0.6.0)
-    nokogiri (1.13.1-aarch64-linux)
+    multi_xml (0.8.1)
+      bigdecimal (>= 3.1, < 5)
+    nokogiri (1.19.3-aarch64-linux-gnu)
       racc (~> 1.4)
-    racc (1.6.0)
-    rack (2.2.3)
-    rack-test (1.1.0)
-      rack (>= 1.0, < 3)
-    rails-dom-testing (2.0.3)
-      activesupport (>= 4.2.0)
+    parallel (1.28.0)
+    parser (3.3.11.1)
+      ast (~> 2.4.1)
+      racc
+    prism (1.9.0)
+    public_suffix (7.0.5)
+    racc (1.8.1)
+    rack (2.2.23)
+    rack-test (2.2.0)
+      rack (>= 1.3)
+    rails-dom-testing (2.3.0)
+      activesupport (>= 5.0.0)
+      minitest
       nokogiri (>= 1.6)
-    rails-html-sanitizer (1.4.2)
-      loofah (~> 2.3)
+    rails-html-sanitizer (1.7.0)
+      loofah (~> 2.25)
+      nokogiri (>= 1.15.7, != 1.16.7, != 1.16.6, != 1.16.5, != 1.16.4, != 1.16.3, != 1.16.2, != 1.16.1, != 1.16.0.rc1, != 1.16.0)
     railties (7.0.0)
       actionpack (= 7.0.0)
       activesupport (= 7.0.0)
@@ -79,8 +102,10 @@ GEM
       rake (>= 12.2)
       thor (~> 1.0)
       zeitwerk (~> 2.5)
+    rainbow (3.1.1)
     rake (12.3.3)
-    rchardet (1.8.0)
+    rchardet (1.10.0)
+    regexp_parser (2.12.0)
     rspec (3.10.0)
       rspec-core (~> 3.10.0)
       rspec-expectations (~> 3.10.0)
@@ -94,10 +119,34 @@ GEM
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.10.0)
     rspec-support (3.10.3)
+    rubocop (1.86.1)
+      json (~> 2.3)
+      language_server-protocol (~> 3.17.0.2)
+      lint_roller (~> 1.1.0)
+      parallel (>= 1.10)
+      parser (>= 3.3.0.2)
+      rainbow (>= 2.2.2, < 4.0)
+      regexp_parser (>= 2.9.3, < 3.0)
+      rubocop-ast (>= 1.49.0, < 2.0)
+      ruby-progressbar (~> 1.7)
+      unicode-display_width (>= 2.4.0, < 4.0)
+    rubocop-ast (1.49.1)
+      parser (>= 3.3.7.2)
+      prism (~> 1.7)
+    rubocop-rails (2.34.3)
+      activesupport (>= 4.2.0)
+      lint_roller (~> 1.1)
+      rack (>= 1.1)
+      rubocop (>= 1.75.0, < 2.0)
+      rubocop-ast (>= 1.44.0, < 2.0)
+    ruby-progressbar (1.13.0)
     thor (1.2.1)
     tzinfo (2.0.4)
       concurrent-ruby (~> 1.0)
-    zeitwerk (2.5.3)
+    unicode-display_width (3.2.0)
+      unicode-emoji (~> 4.1)
+    unicode-emoji (4.2.0)
+    zeitwerk (2.7.5)
 
 PLATFORMS
   aarch64-linux

data/README.md

@@ -1,4 +1,4 @@
-# Modulorails [![Build Status](https://travis-ci.com/Ezveus/modulorails.svg?branch=master)](https://travis-ci.com/Ezveus/modulorails)
+# Modulorails
 
 **Modulorails** is the common base for the Ruby on Rails project at [Modulotech](https://www.modulotech.fr/).
 
@@ -28,11 +28,73 @@ Modulorails.configure do |config|
   config.project_manager 'The email of the project manager of the application'
   config.endpoint 'The url to the intranet'
   config.api_key 'The API key'
-  config.review_base_url 'The base url for the review environments' # optional
-  config.staging_url 'The url for the staging environment'          # optional
-  config.production_url 'The url for the production environment'    # optional
 end
-``` 
+```
+
+## Features
+
+### Devcontainer Support
+
+Modulorails automatically generates a `.devcontainer/` configuration for VS Code and compatible IDEs:
+- `Dockerfile` for the development container
+- `compose.yml` with database, Redis, and mailcatcher services
+- `devcontainer.json` for VS Code integration
+
+### Docker Scripts
+
+Two helper scripts are provided in `bin/`:
+- `bin/dc` - Wrapper for `docker compose` commands targeting the devcontainer
+- `bin/dcr` - Wrapper for `docker compose run` with proper TTY and Git configuration
+
+Usage:
+```bash
+bin/dc up -d          # Start services in background
+bin/dc logs -f app    # Follow app logs
+bin/dcr rails console # Run Rails console in container
+bin/dcr rspec         # Run tests in container
+```
+
+### Claude Code Integration
+
+Modulorails can configure your devcontainer for efficient use with Claude Code:
+- Persistent bash history across container restarts
+- Claude Code configuration volume
+- Firewall initialization script
+
+### Bun JS Engine Support
+
+Modulorails detects and supports the Bun JavaScript runtime. When `bun.config.js` is present, the devcontainer will include appropriate JS and CSS build services.
+
+### Other Generators
+
+- **RubocopGenerator** - Configures `.rubocop.yml` with Modulotech standards
+- **BundlerauditGenerator** - Sets up bundler-audit for security checks
+- **GithooksGenerator** - Installs git hooks for automated checks
+- **HealthCheckGenerator** - Configures the health_check gem
+- **SidekiqGenerator** - Adds Sidekiq background job processing
+
+## Deprecations (will be removed in 2.0)
+
+The following features are deprecated and will be removed in version 2.0:
+
+### Configuration options
+- `config.staging_url`
+- `config.review_base_url`
+- `config.production_url`
+- `config.no_auto_update`
+
+### Services
+- `Modulorails::BaseService#log` - Use `Rails.logger.debug` directly
+- `Modulorails::LogsForMethodService` - Use `Rails.logger.debug` directly
+
+### Generators
+The following generators are deprecated and will be moved to Moduloproject 3.0:
+- `Modulorails::DockerGenerator` (and all sub-generators)
+- `Modulorails::GitlabciGenerator`
+- `Modulorails::ClaudeCodeGenerator`
+- `Modulorails::ModuloprojectGenerator`
+- `Modulorails::SidekiqGenerator`
+- `Modulorails::SelfUpdateGenerator` (will be removed entirely)
 
 ## Development
 
@@ -47,10 +109,8 @@ There are tests in `spec`. To run tests:
   - Ruby 3.1: `docker compose run ruby31`
 
 [Appraisal](https://github.com/thoughtbot/appraisal) is used to test the gem against many supported Rails versions:
-  - Rails 5.2, 6.0 and 6.1 on Ruby 2.5 and 2.6. 
-  - Rails 5.2, 6.0, 6.1 and 7.0 on Ruby 2.7, 3.0 and 3.1. 
-
-Travis CI is configured to automatically run tests in all supported Ruby versions and dependency sets after each push.
+  - Rails 5.2, 6.0 and 6.1 on Ruby 2.5 and 2.6.
+  - Rails 5.2, 6.0, 6.1 and 7.0 on Ruby 2.7, 3.0 and 3.1.
 
 ## Contributing
 

data/lib/generators/modulorails/claude_code/claude_code_generator.rb

@@ -0,0 +1,64 @@
+# frozen_string_literal: true
+
+require 'modulorails/generators/base'
+
+class Modulorails::ClaudeCodeGenerator < Modulorails::Generators::Base
+
+  VERSION = 1
+
+  desc 'This generator configures the devcontainer to use Claude Code efficiently'
+
+  protected
+
+  def create_config
+    Modulorails.deprecator.warn(<<~MESSAGE)
+      Modulorails::ClaudeCodeGenerator is deprecated and will be removed in version 2.0.
+      Use Moduloproject 3.0 (available later) to initialize new projects with Claude Code configuration.
+    MESSAGE
+
+    @data = Modulorails.data
+    @image_name = @data.name.parameterize
+    @environment_name = @data.environment_name
+    @adapter = @data.adapter
+    @review_base_url = @data.review_base_url
+    @staging_url = @data.staging_url
+    @production_url = @data.production_url
+
+    template 'bin/init-firewall.sh'
+    inject_into_file(Rails.root.join('bin/setup'), "\n  puts \"== Setting up firewall rules ==\"\n  system(\"bin/init-firewall.sh\")\n", after: "APP_ROOT do")
+    inject_into_file(Rails.root.join('.devcontainer/devcontainer.json'), after: '"shutdownAction": "stopCompose",') do
+      <<-JSON
+
+  "mounts": [
+    "source=claude-code-bashhistory,target=/commandhistory,type=volume",
+    "source=claude-code-config,target=/root/.claude,type=volume"
+  ],
+
+	"remoteEnv": {
+    "NODE_OPTIONS": "--max-old-space-size=4096",
+    "CLAUDE_CONFIG_DIR": "/root/.claude"
+	},
+
+      JSON
+    end
+    inject_into_file(Rails.root.join('.devcontainer/Dockerfile'), before: 'RUN gem install bundler') do
+      <<-DOCKERFILE
+ENV DEVCONTAINER=true
+
+# Persist bash history.
+RUN SNIPPET="export PROMPT_COMMAND='history -a' && export HISTFILE=/commandhistory/.bash_history" \
+  && mkdir /commandhistory \
+  && touch /commandhistory/.bash_history
+
+RUN mkdir -p /root/.claude
+
+# Install Claude Code (native installation)
+RUN curl -fsSL https://claude.ai/install.sh | bash
+
+      DOCKERFILE
+    end
+  rescue StandardError => e
+    warn("[Modulorails] Error: cannot configure Claude Code: #{e.message}")
+  end
+
+end

data/lib/generators/modulorails/claude_code/templates/.gitlab-ci.yml.tt

@@ -0,0 +1,120 @@
+include:
+  - project: 'modulosource/modulotech/devops/gitlab-ci-templates'
+    file:
+      - '/templates/helm.gitlab-ci.yml'
+      - '/templates/integration.gitlab-ci.yml'
+      - '/templates/docker-buildx.gitlab-ci.yml'
+
+variables:
+  IMAGE_NAME: <%= @image_name %>
+
+stages:
+  - test
+  - build
+  - deploy
+
+build_integration_image:
+  extends: .build_integration_image
+
+test:
+  extends: .test
+  services:
+    <%- if @adapter =~ /mysql/ -%>
+    - mysql:8-alpine
+    <%- else -%>
+    - postgres:16-alpine
+    <%- end -%>
+    - redis:7-alpine
+  variables:
+    RAILS_ENV: test
+    <%- if @adapter =~ /mysql/ -%>
+    MYSQL_DATABASE: <%= @image_name %>-test
+    MYSQL_ALLOW_EMPTY_PASSWORD: 'true'
+    DATABASE_TEST_URL: 'mysql2://root@mysql/<%= @image_name %>-test'
+    <%- else -%>
+    POSTGRES_DB: <%= @image_name %>-test
+    POSTGRES_USER: postgres
+    POSTGRES_PASSWORD: postgres
+    DATABASE_TEST_URL: 'postgresql://postgres:postgres@postgres/<%= @image_name %>-test'
+    <%- end -%>
+  script:
+    - bin/test
+
+docker_build:
+  extends: .docker_buildx_push
+  variables:
+    DOCKERFILE: Dockerfile
+  only:
+    - merge_requests
+    - staging
+    - master
+
+<%- if @review_base_url.present? -%>
+deploy_review:
+  extends: .deploy_helm
+  variables:
+    NAMESPACE: <%= @image_name %>-$CI_ENVIRONMENT_SLUG
+    NAME: <%= @image_name %>
+    CHART_NAME: rails
+    CONFIG_FILE: config/deploy/review.yaml
+    EXTRA_VARS: --set image.tag=$CI_COMMIT_SHORT_SHA --set ingress.hosts[0].host=${CI_ENVIRONMENT_SLUG}.<%= @review_base_url %> --set ingress.tls[0].hosts[0]=${CI_ENVIRONMENT_SLUG}.<%= @review_base_url %> --set env.url=${CI_ENVIRONMENT_SLUG}.<%= @review_base_url %> --set database.url=$DATABASE_URL --set master_key.key=$MASTER_KEY
+  environment:
+    name: review/$CI_COMMIT_REF_SLUG
+    url: https://${CI_ENVIRONMENT_SLUG}.<%= @review_base_url %>
+    on_stop: stop_review
+    auto_stop_in: 3 days
+  only:
+    - merge_requests
+
+stop_review:
+  extends: .stop_review
+  variables:
+    NAMESPACE: <%= @image_name %>-$CI_ENVIRONMENT_SLUG
+    NAME: <%= @image_name %>
+  only:
+    - merge_requests
+<%- end -%>
+
+<%- if @staging_url.present? -%>
+deploy_staging:
+  extends: .deploy_helm
+  variables:
+    NAMESPACE: <%= @image_name %>
+    NAME: <%= @image_name %>
+    CHART_NAME: rails
+    CONFIG_FILE: config/deploy/staging.yaml
+    EXTRA_VARS: --set image.tag=$CI_COMMIT_SHORT_SHA --set database.url=$DATABASE_URL --set master_key.key=$MASTER_KEY
+  environment:
+    name: staging
+    url: https://<%= @staging_url %>
+    on_stop: stop_staging
+    auto_stop_in: 7 days
+  only:
+    - staging
+
+stop_staging:
+  extends: .stop_staging
+  variables:
+    NAMESPACE: <%= @image_name %>
+    NAME: <%= @image_name %>
+  only:
+    - staging
+  needs:
+    - docker_build
+<%- end -%>
+
+<%- if @production_url.present? -%>
+deploy_production:
+  extends: .deploy_helm
+  variables:
+    NAMESPACE: <%= @image_name %>
+    NAME: <%= @image_name %>
+    CHART_NAME: rails
+    CONFIG_FILE: config/deploy/production.yaml
+    EXTRA_VARS: --set image.tag=$CI_COMMIT_SHORT_SHA
+  environment:
+    name: production
+    url: https://<%= @production_url %>
+  only:
+    - master
+<%- end -%>