create-nexwire 4.2.5 → 4.4.0

package/fastify/src/framework/maker-cli/stubs/deploy/env/postgres.server.stub

@@ -0,0 +1,68 @@
+# App deploy env template (shared for local + remote)
+# Local: use this as deploy/.env
+# Remote: use this as deploy/.env
+# Runtime settings (mail, storage, cors, log level, toggles, expiries) live in
+# src/config/*. Only app basics, secrets, and infra vars belong in this file.
+# ── App ────────────────────────────────────────────
+APP_ENV=production
+APP_NAME=nexwire
+APP_HOST=localhost
+APP_PORT=3000
+
+# Full public URL the app is served at (used for links, redirects, CORS)
+# Local: http://localhost:3000  |  Remote: https://your-domain.com
+APP_URL=http://localhost:3000
+
+# Run "db:migrate --seed" automatically on container start (true/false)
+AUTO_MIGRATE=true
+
+# UI origin (only needed when UI is on a different domain than API)
+# Leave empty if UI is served from the same APP_URL or UI=false
+FRONTEND_URL={{FRONTEND_URL}}
+
+# ── Reverse Proxy (nginx-proxy) ────────────────────
+# Remote only: nginx-proxy routes by VIRTUAL_HOST and auto-issues Let's Encrypt certs.
+# Leave empty for local-only deploys.
+VIRTUAL_HOST=
+VIRTUAL_PORT=3000
+LETSENCRYPT_HOST=
+LETSENCRYPT_EMAIL=
+
+# ── Database ───────────────────────────────────────
+# Set the password and database name to match deploy/server/.env
+DATABASE_URL=postgres://postgres:change-me-postgres@postgres-global:5432/postgres
+
+# ── JWT Auth (expiries live in src/config/jwt.ts) ──
+JWT_ACCESS_SECRET={{JWT_ACCESS_SECRET}}
+JWT_REFRESH_SECRET={{JWT_REFRESH_SECRET}}
+
+# ── Cookie (name lives in src/config/cookie.ts) ────
+COOKIE_SECRET={{COOKIE_SECRET}}
+
+# ── Storage credentials (driver/disk/bucket live in src/config/storage.ts) ──
+STORAGE_ACCESS_KEY_ID={{STORAGE_ACCESS_KEY_ID}}
+STORAGE_SECRET_ACCESS_KEY={{STORAGE_SECRET_ACCESS_KEY}}
+
+# ── Mail credentials (host/port/encryption live in src/config/mail.ts) ──
+MAIL_USERNAME=
+MAIL_PASSWORD=
+
+# ── Redis ──────────────────────────────────────────
+# Enables/disables cache, session, queue, events, Queue Dashboard (all Redis-backed services)
+REDIS={{REDIS_ENABLED}}
+REDIS_URL=redis://redis-global:6379
+REDIS_PREFIX={{REDIS_PREFIX}}
+
+# ── Feature Toggle (build) ─────────────────────────
+# Enable/disable UI build and serving. Set false for API-only mode
+UI={{UI}}
+
+# ── Feature Toggle ─────────────────────────────────
+# OpenAPI / Scalar docs at /api-docs. Set true to enable.
+OPEN_API={{OPEN_API}}
+# Socket.IO realtime server. Set false to disable.
+SOCKET={{SOCKET}}
+# Security headers (CSP, HSTS, X-Frame). Set false to disable.
+SECURITY_HEADERS={{SECURITY_HEADERS}}
+
+

package/fastify/src/framework/maker-cli/stubs/deploy/env/sqlite.stub

@@ -0,0 +1,67 @@
+# App deploy env template (shared for local + remote)
+# Local: use this as deploy/.env
+# Remote: use this as deploy/.env
+# Runtime settings (mail, storage, cors, log level, toggles, expiries) live in
+# src/config/*. Only app basics, secrets, and infra vars belong in this file.
+# ── App ────────────────────────────────────────────
+APP_ENV=production
+APP_NAME=nexwire
+APP_HOST=localhost
+APP_PORT=3000
+
+# Full public URL the app is served at (used for links, redirects, CORS)
+# Local: http://localhost:3000  |  Remote: https://your-domain.com
+APP_URL=http://localhost:3000
+
+# Run "db:migrate --seed" automatically on container start (true/false)
+AUTO_MIGRATE=true
+
+# UI origin (only needed when UI is on a different domain than API)
+# Leave empty if UI is served from the same APP_URL or UI=false
+FRONTEND_URL={{FRONTEND_URL}}
+
+# ── Reverse Proxy (nginx-proxy) ────────────────────
+# Remote only: nginx-proxy routes by VIRTUAL_HOST and auto-issues Let's Encrypt certs.
+# Leave empty for local-only deploys.
+VIRTUAL_HOST=
+VIRTUAL_PORT=3000
+LETSENCRYPT_HOST=
+LETSENCRYPT_EMAIL=
+
+# ── Database ───────────────────────────────────────
+DATABASE_URL=sqlite:./src/storage/database/nexwire.sqlite
+
+# ── JWT Auth (expiries live in src/config/jwt.ts) ──
+JWT_ACCESS_SECRET={{JWT_ACCESS_SECRET}}
+JWT_REFRESH_SECRET={{JWT_REFRESH_SECRET}}
+
+# ── Cookie (name lives in src/config/cookie.ts) ────
+COOKIE_SECRET={{COOKIE_SECRET}}
+
+# ── Storage credentials (driver/disk/bucket live in src/config/storage.ts) ──
+STORAGE_ACCESS_KEY_ID={{STORAGE_ACCESS_KEY_ID}}
+STORAGE_SECRET_ACCESS_KEY={{STORAGE_SECRET_ACCESS_KEY}}
+
+# ── Mail credentials (host/port/encryption live in src/config/mail.ts) ──
+MAIL_USERNAME=
+MAIL_PASSWORD=
+
+# ── Redis ──────────────────────────────────────────
+# Enables/disables cache, session, queue, events, Queue Dashboard (all Redis-backed services)
+REDIS={{REDIS_ENABLED}}
+REDIS_URL=redis://redis-global:6379
+REDIS_PREFIX={{REDIS_PREFIX}}
+
+# ── Feature Toggle (build) ─────────────────────────
+# Enable/disable UI build and serving. Set false for API-only mode
+UI={{UI}}
+
+# ── Feature Toggle ─────────────────────────────────
+# OpenAPI / Scalar docs at /api-docs. Set true to enable.
+OPEN_API={{OPEN_API}}
+# Socket.IO realtime server. Set false to disable.
+SOCKET={{SOCKET}}
+# Security headers (CSP, HSTS, X-Frame). Set false to disable.
+SECURITY_HEADERS={{SECURITY_HEADERS}}
+
+

package/fastify/src/framework/maker-cli/stubs/deploy/scripts/auto-migrate.sh.stub

@@ -0,0 +1,41 @@
+#!/bin/sh
+#
+# auto-migrate.sh - Runs database migrations + seeders when the container starts.
+#
+# How it works:
+#   supervisord launches this script on every container start:
+#     /bin/sh /app/deploy/scripts/auto-migrate.sh bun
+#   The 1st argument ("bun") is the runtime used to run the CLI command.
+#
+#   The AUTO_MIGRATE environment variable (from .env) decides what happens:
+#     AUTO_MIGRATE=true  -> run "db:migrate --seed" (apply pending migrations, then seed)
+#     AUTO_MIGRATE=false -> do nothing, leave the database untouched.
+#
+#   "db:migrate --seed" is safe to run on every start:
+#     - it only applies migrations that have not run yet,
+#     - the seeders only insert rows that are missing, so no duplicates.
+
+set -eu   # (set -e: stop on any error; set -u: fail if a variable is unset)
+
+# ---- 1. Read the settings ----
+RUNTIME_EXEC="${1:-node}"                 # runtime to run the CLI: "bun" (falls back to "node")
+AUTO_MIGRATE_RAW="${AUTO_MIGRATE:-false}" # raw value of AUTO_MIGRATE, "false" if not set
+
+# Normalize the value so "TRUE", "True", "true ", "true" all mean the same thing:
+#   tr -d '\r'          -> remove carriage returns (files edited on Windows)
+#   tr '[:upper:]' ...  -> lowercase everything
+#   sed ... trim        -> remove leading/trailing spaces
+AUTO_MIGRATE_NORMALIZED=$(echo "$AUTO_MIGRATE_RAW" | tr -d '\r' | tr '[:upper:]' '[:lower:]' | sed 's/^[[:space:]]*//;s/[[:space:]]*$//')
+
+# ---- 2. Decide: migrate or skip ----
+case "$AUTO_MIGRATE_NORMALIZED" in
+  true|1|yes)
+    # AUTO_MIGRATE is on -> run pending migrations, then seed the database.
+    exec "$RUNTIME_EXEC" src/framework/maker-cli/index.mjs db:migrate --seed
+    ;;
+  *)
+    # AUTO_MIGRATE is off -> leave the database untouched.
+    echo "Skipping migrations (AUTO_MIGRATE=$AUTO_MIGRATE_RAW)"
+    ;;
+esac
+

package/fastify/src/framework/maker-cli/stubs/deploy/server/README.stub

@@ -0,0 +1,78 @@
+# Server Deploy (Shared Infra)
+
+This stack is shared by multiple apps on one server.
+
+## Includes
+
+- jwilder nginx-proxy
+- letsencrypt companion
+- mysql-global
+- postgres-global
+{{REDIS_INCLUDE_LINE}}
+- phpmyadmin + pgadmin
+
+{{REDIS_CONFIG_LINE}}
+
+## Setup
+
+```bash
+cp deploy/server/.env.example deploy/server/.env
+cp deploy/server/.env.local.example deploy/server/.env.local
+docker network create nginx-proxy || true
+docker network create infra || true
+docker compose --env-file deploy/server/.env --env-file deploy/server/.env.local -f deploy/server/docker-compose.yml up -d
+```
+
+Equivalent maker command:
+
+```bash
+bun maker deploy:workflow --server-only
+```
+
+Local Docker Desktop:
+- Proxy: `http://localhost:8081`
+- phpMyAdmin direct: `http://localhost:8082`
+- pgAdmin direct: `http://localhost:8083`
+
+Remote server deploy:
+- Keep `PROXY_HTTP_PORT=80` and `PROXY_HTTPS_PORT=443`
+- Keep `PHPMYADMIN_LOCAL_PORT=127.0.0.1:8082` and `PGADMIN_LOCAL_PORT=127.0.0.1:8083` to avoid exposing admin UIs publicly
+- Optionally remove `.env.local`
+
+## Env File Precedence (Important)
+
+This stack intentionally uses two env files together:
+
+```bash
+--env-file deploy/server/.env --env-file deploy/server/.env.local
+```
+
+Rule:
+- Values in `deploy/server/.env.local` override same keys from `deploy/server/.env`.
+
+Why:
+- `deploy/server/.env` is your shared base (works for remote/server defaults).
+- `deploy/server/.env.local` is for Docker Desktop-only overrides.
+
+Typical split:
+- `deploy/server/.env`
+  - `PROXY_HTTP_PORT=80`
+  - `PROXY_HTTPS_PORT=443`
+  - production domains like `PHPMYADMIN_DOMAIN=pma.example.com`
+- `deploy/server/.env.local`
+  - `PROXY_HTTP_PORT=8081`
+  - `PROXY_HTTPS_PORT=8443`
+  - local domains like `PHPMYADMIN_DOMAIN=pma.localhost`
+
+Result on local Docker Desktop:
+- Effective proxy ports become `8081/8443` (from `.env.local`).
+- Effective local domains become `pma.localhost` / `pga.localhost` (from `.env.local`).
+
+Result on remote server:
+- Use only `deploy/server/.env` (or keep `.env.local` empty/unused).
+- Effective proxy ports stay `80/443`.
+
+Then each app deploy joins external networks `nginx-proxy` and `infra`.
+
+Custom per-domain nginx overrides are in `deploy/server/nginx-vhost/`.
+

package/fastify/src/framework/maker-cli/stubs/deploy/server/compose/noredis.stub

@@ -0,0 +1,120 @@
+services:
+  nginx-proxy:
+    image: jwilder/nginx-proxy
+    container_name: nginx-proxy
+    restart: unless-stopped
+    ports:
+      - "${PROXY_HTTP_PORT:-80}:80"
+      - "${PROXY_HTTPS_PORT:-443}:443"
+    volumes:
+      - /var/run/docker.sock:/tmp/docker.sock:ro
+      - ./certs:/etc/nginx/certs
+      - ./nginx-vhost:/etc/nginx/vhost.d
+      - ./html:/usr/share/nginx/html
+    labels:
+      com.github.nginx-proxy.nginx: "true"
+    networks:
+      - nginx-proxy
+
+  letsencrypt:
+    image: jrcs/letsencrypt-nginx-proxy-companion
+    container_name: nginx-letsencrypt
+    restart: unless-stopped
+    depends_on:
+      - nginx-proxy
+    environment:
+      NGINX_PROXY_CONTAINER: nginx-proxy
+      DEFAULT_EMAIL: ${LETSENCRYPT_EMAIL}
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - ./certs:/etc/nginx/certs
+      - ./nginx-vhost:/etc/nginx/vhost.d
+      - ./html:/usr/share/nginx/html
+      - ./acme:/etc/acme.sh
+    networks:
+      - nginx-proxy
+
+  mysql:
+    image: mysql:8.4
+    container_name: mysql-global
+    restart: unless-stopped
+    environment:
+      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD}
+      MYSQL_DATABASE: ${MYSQL_DATABASE}
+    volumes:
+      - mysql_global_data:/var/lib/mysql
+    ports:
+      - "${MYSQL_PORT:-4000}:3306"
+    networks:
+      - infra
+
+  postgres:
+    image: postgres:16-alpine
+    container_name: postgres-global
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: ${POSTGRES_USER}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
+      POSTGRES_DB: ${POSTGRES_DB}
+    volumes:
+      - postgres_global_data:/var/lib/postgresql/data
+    ports:
+      - "${POSTGRES_PORT:-4001}:5432"
+    networks:
+      - infra
+
+  phpmyadmin:
+    image: phpmyadmin:5-apache
+    container_name: phpmyadmin
+    restart: unless-stopped
+    environment:
+      PMA_HOST: mysql-global
+      PMA_PORT: 3306
+      PMA_ARBITRARY: 1
+      VIRTUAL_HOST: ${PHPMYADMIN_DOMAIN}
+      VIRTUAL_PORT: 80
+      LETSENCRYPT_HOST: ${PHPMYADMIN_DOMAIN}
+      LETSENCRYPT_EMAIL: ${LETSENCRYPT_EMAIL}
+    ports:
+      - "${PHPMYADMIN_LOCAL_PORT:-127.0.0.1:8082}:80"
+    networks:
+      - infra
+      - nginx-proxy
+
+  pgadmin:
+    image: dpage/pgadmin4:latest
+    container_name: pgadmin
+    restart: unless-stopped
+    depends_on:
+      - postgres
+    environment:
+      PGADMIN_DEFAULT_EMAIL: ${PGADMIN_DEFAULT_EMAIL}
+      PGADMIN_DEFAULT_PASSWORD: ${PGADMIN_DEFAULT_PASSWORD}
+      PGADMIN_CONFIG_SERVER_MODE: "True"
+      PGADMIN_SERVER_JSON_FILE: /pgadmin4/servers.json
+      VIRTUAL_HOST: ${PGADMIN_DOMAIN}
+      VIRTUAL_PORT: 80
+      LETSENCRYPT_HOST: ${PGADMIN_DOMAIN}
+      LETSENCRYPT_EMAIL: ${LETSENCRYPT_EMAIL}
+    volumes:
+      - pgadmin_data:/var/lib/pgadmin
+      - ./pgadmin/servers.json:/pgadmin4/servers.json:ro
+    ports:
+      - "${PGADMIN_LOCAL_PORT:-127.0.0.1:8083}:80"
+    networks:
+      - infra
+      - nginx-proxy
+
+volumes:
+  mysql_global_data:
+  postgres_global_data:
+  pgadmin_data:
+
+networks:
+  nginx-proxy:
+    external: true
+    name: nginx-proxy
+  infra:
+    external: true
+    name: infra
+

package/fastify/src/framework/maker-cli/stubs/deploy/server/compose/redis.dev.stub

@@ -0,0 +1,133 @@
+services:
+  nginx-proxy:
+    image: jwilder/nginx-proxy
+    container_name: nginx-proxy
+    restart: unless-stopped
+    ports:
+      - "${PROXY_HTTP_PORT:-80}:80"
+      - "${PROXY_HTTPS_PORT:-443}:443"
+    volumes:
+      - /var/run/docker.sock:/tmp/docker.sock:ro
+      - ./certs:/etc/nginx/certs
+      - ./nginx-vhost:/etc/nginx/vhost.d
+      - ./html:/usr/share/nginx/html
+    labels:
+      com.github.nginx-proxy.nginx: "true"
+    networks:
+      - nginx-proxy
+
+  letsencrypt:
+    image: jrcs/letsencrypt-nginx-proxy-companion
+    container_name: nginx-letsencrypt
+    restart: unless-stopped
+    depends_on:
+      - nginx-proxy
+    environment:
+      NGINX_PROXY_CONTAINER: nginx-proxy
+      DEFAULT_EMAIL: ${LETSENCRYPT_EMAIL}
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - ./certs:/etc/nginx/certs
+      - ./nginx-vhost:/etc/nginx/vhost.d
+      - ./html:/usr/share/nginx/html
+      - ./acme:/etc/acme.sh
+    networks:
+      - nginx-proxy
+
+  mysql:
+    image: mysql:8.4
+    container_name: mysql-global
+    restart: unless-stopped
+    environment:
+      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD}
+      MYSQL_DATABASE: ${MYSQL_DATABASE}
+    volumes:
+      - mysql_global_data:/var/lib/mysql
+    ports:
+      - "${MYSQL_PORT:-4000}:3306"
+    networks:
+      - infra
+
+  postgres:
+    image: postgres:16-alpine
+    container_name: postgres-global
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: ${POSTGRES_USER}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
+      POSTGRES_DB: ${POSTGRES_DB}
+    volumes:
+      - postgres_global_data:/var/lib/postgresql/data
+    ports:
+      - "${POSTGRES_PORT:-4001}:5432"
+    networks:
+      - infra
+
+  redis:
+    image: redis:7-alpine
+    container_name: redis-global
+    restart: unless-stopped
+    ports:
+      - "6379:6379"
+    volumes:
+      - redis_global_data:/data
+    command: ["redis-server", "--appendonly", "yes", "--maxmemory", "512mb", "--maxmemory-policy", "noeviction"]
+    networks:
+      - infra
+
+  phpmyadmin:
+    image: phpmyadmin:5-apache
+    container_name: phpmyadmin
+    restart: unless-stopped
+    environment:
+      PMA_HOST: mysql-global
+      PMA_PORT: 3306
+      PMA_ARBITRARY: 1
+      VIRTUAL_HOST: ${PHPMYADMIN_DOMAIN}
+      VIRTUAL_PORT: 80
+      LETSENCRYPT_HOST: ${PHPMYADMIN_DOMAIN}
+      LETSENCRYPT_EMAIL: ${LETSENCRYPT_EMAIL}
+    ports:
+      - "${PHPMYADMIN_LOCAL_PORT:-127.0.0.1:8082}:80"
+    networks:
+      - infra
+      - nginx-proxy
+
+  pgadmin:
+    image: dpage/pgadmin4:latest
+    container_name: pgadmin
+    restart: unless-stopped
+    depends_on:
+      - postgres
+    environment:
+      PGADMIN_DEFAULT_EMAIL: ${PGADMIN_DEFAULT_EMAIL}
+      PGADMIN_DEFAULT_PASSWORD: ${PGADMIN_DEFAULT_PASSWORD}
+      PGADMIN_CONFIG_SERVER_MODE: "True"
+      PGADMIN_SERVER_JSON_FILE: /pgadmin4/servers.json
+      VIRTUAL_HOST: ${PGADMIN_DOMAIN}
+      VIRTUAL_PORT: 80
+      LETSENCRYPT_HOST: ${PGADMIN_DOMAIN}
+      LETSENCRYPT_EMAIL: ${LETSENCRYPT_EMAIL}
+    volumes:
+      - pgadmin_data:/var/lib/pgadmin
+      - ./pgadmin/servers.json:/pgadmin4/servers.json:ro
+    ports:
+      - "${PGADMIN_LOCAL_PORT:-127.0.0.1:8083}:80"
+    networks:
+      - infra
+      - nginx-proxy
+
+volumes:
+  mysql_global_data:
+  postgres_global_data:
+  redis_global_data:
+  pgadmin_data:
+
+networks:
+  nginx-proxy:
+    external: true
+    name: nginx-proxy
+  infra:
+    external: true
+    name: infra
+

package/fastify/src/framework/maker-cli/stubs/deploy/server/compose/redis.stub

@@ -0,0 +1,131 @@
+services:
+  nginx-proxy:
+    image: jwilder/nginx-proxy
+    container_name: nginx-proxy
+    restart: unless-stopped
+    ports:
+      - "${PROXY_HTTP_PORT:-80}:80"
+      - "${PROXY_HTTPS_PORT:-443}:443"
+    volumes:
+      - /var/run/docker.sock:/tmp/docker.sock:ro
+      - ./certs:/etc/nginx/certs
+      - ./nginx-vhost:/etc/nginx/vhost.d
+      - ./html:/usr/share/nginx/html
+    labels:
+      com.github.nginx-proxy.nginx: "true"
+    networks:
+      - nginx-proxy
+
+  letsencrypt:
+    image: jrcs/letsencrypt-nginx-proxy-companion
+    container_name: nginx-letsencrypt
+    restart: unless-stopped
+    depends_on:
+      - nginx-proxy
+    environment:
+      NGINX_PROXY_CONTAINER: nginx-proxy
+      DEFAULT_EMAIL: ${LETSENCRYPT_EMAIL}
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - ./certs:/etc/nginx/certs
+      - ./nginx-vhost:/etc/nginx/vhost.d
+      - ./html:/usr/share/nginx/html
+      - ./acme:/etc/acme.sh
+    networks:
+      - nginx-proxy
+
+  mysql:
+    image: mysql:8.4
+    container_name: mysql-global
+    restart: unless-stopped
+    environment:
+      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD}
+      MYSQL_DATABASE: ${MYSQL_DATABASE}
+    volumes:
+      - mysql_global_data:/var/lib/mysql
+    ports:
+      - "${MYSQL_PORT:-4000}:3306"
+    networks:
+      - infra
+
+  postgres:
+    image: postgres:16-alpine
+    container_name: postgres-global
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: ${POSTGRES_USER}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
+      POSTGRES_DB: ${POSTGRES_DB}
+    volumes:
+      - postgres_global_data:/var/lib/postgresql/data
+    ports:
+      - "${POSTGRES_PORT:-4001}:5432"
+    networks:
+      - infra
+
+  redis:
+    image: redis:7-alpine
+    container_name: redis-global
+    restart: unless-stopped
+    volumes:
+      - redis_global_data:/data
+    command: ["redis-server", "--appendonly", "yes", "--maxmemory", "512mb", "--maxmemory-policy", "noeviction"]
+    networks:
+      - infra
+
+  phpmyadmin:
+    image: phpmyadmin:5-apache
+    container_name: phpmyadmin
+    restart: unless-stopped
+    environment:
+      PMA_HOST: mysql-global
+      PMA_PORT: 3306
+      PMA_ARBITRARY: 1
+      VIRTUAL_HOST: ${PHPMYADMIN_DOMAIN}
+      VIRTUAL_PORT: 80
+      LETSENCRYPT_HOST: ${PHPMYADMIN_DOMAIN}
+      LETSENCRYPT_EMAIL: ${LETSENCRYPT_EMAIL}
+    ports:
+      - "${PHPMYADMIN_LOCAL_PORT:-127.0.0.1:8082}:80"
+    networks:
+      - infra
+      - nginx-proxy
+
+  pgadmin:
+    image: dpage/pgadmin4:latest
+    container_name: pgadmin
+    restart: unless-stopped
+    depends_on:
+      - postgres
+    environment:
+      PGADMIN_DEFAULT_EMAIL: ${PGADMIN_DEFAULT_EMAIL}
+      PGADMIN_DEFAULT_PASSWORD: ${PGADMIN_DEFAULT_PASSWORD}
+      PGADMIN_CONFIG_SERVER_MODE: "True"
+      PGADMIN_SERVER_JSON_FILE: /pgadmin4/servers.json
+      VIRTUAL_HOST: ${PGADMIN_DOMAIN}
+      VIRTUAL_PORT: 80
+      LETSENCRYPT_HOST: ${PGADMIN_DOMAIN}
+      LETSENCRYPT_EMAIL: ${LETSENCRYPT_EMAIL}
+    volumes:
+      - pgadmin_data:/var/lib/pgadmin
+      - ./pgadmin/servers.json:/pgadmin4/servers.json:ro
+    ports:
+      - "${PGADMIN_LOCAL_PORT:-127.0.0.1:8083}:80"
+    networks:
+      - infra
+      - nginx-proxy
+
+volumes:
+  mysql_global_data:
+  postgres_global_data:
+  redis_global_data:
+  pgadmin_data:
+
+networks:
+  nginx-proxy:
+    external: true
+    name: nginx-proxy
+  infra:
+    external: true
+    name: infra
+

package/fastify/src/framework/maker-cli/stubs/deploy/server/env/local.example.stub

@@ -0,0 +1,11 @@
+# Local-only overrides for Docker Desktop
+# This file is applied together with deploy/server/.env and should not be used on remote.
+PROXY_HTTP_PORT=8081
+PROXY_HTTPS_PORT=8443
+PHPMYADMIN_DOMAIN=pma.localhost
+PGADMIN_DOMAIN=pga.localhost
+
+# Optional local DB name override (takes precedence over deploy/server/.env)
+# MYSQL_DATABASE=nexwire
+# POSTGRES_DB=nexwire
+

package/fastify/src/framework/maker-cli/stubs/deploy/server/env/noredis.stub

@@ -0,0 +1,25 @@
+# Server infra env template (base values)
+# Remote: copy to deploy/server/.env and use as-is
+# Local: copy to deploy/server/.env then override in deploy/server/.env.local
+LETSENCRYPT_EMAIL=ops@example.com
+PROXY_HTTP_PORT=80
+PROXY_HTTPS_PORT=443
+
+MYSQL_ROOT_PASSWORD=change-me-root
+MYSQL_DATABASE=nexwire
+MYSQL_PORT=4000
+
+POSTGRES_USER=postgres
+POSTGRES_PASSWORD=change-me-postgres
+POSTGRES_DB=postgres
+POSTGRES_PORT=4001
+
+REDIS=false
+
+PHPMYADMIN_DOMAIN=pma.example.com
+PGADMIN_DOMAIN=pga.example.com
+PGADMIN_DEFAULT_EMAIL=admin@example.com
+PGADMIN_DEFAULT_PASSWORD=admin123
+PHPMYADMIN_LOCAL_PORT=127.0.0.1:8082
+PGADMIN_LOCAL_PORT=127.0.0.1:8083
+